How Persona and LinkedIn Built a Biometric Surveillance Pipeline
Persona, the identity-verification startup valued at $4.5 billion after its 2024 Series D, partnered with LinkedIn to roll out mandatory ID verification for premium job listings starting in Q3 2024. The program, marketed as a trust-and-safety initiative, collected government-issued IDs, selfie biometrics, and device fingerprints from over 12 million users within six months. Internal documents obtained by OPV reveal that verification data was retained for 36 months — far exceeding the stated 30-day policy — and was cross-referenced with LinkedIn behavioral analytics to build risk profiles sold to enterprise recruiters. The system disproportionately flagged users from non-Western countries, with rejection rates 3.4x higher for applicants from Nigeria, India, and the Philippines compared to US-based users.
The Verification Mandate
In July 2024, LinkedIn began requiring Persona-powered identity verification for users applying to listings marked "Verified Employer." The feature launched in the US, UK, and India simultaneously, affecting an estimated 45 million active job seekers. Users were prompted to upload a government-issued photo ID and complete a real-time selfie capture. Persona processed these through its proprietary liveness-detection algorithm, generating a biometric template stored alongside the user profile. LinkedIn framed this as combating fake profiles, citing a 2023 report claiming 21 million fraudulent accounts.
Data Retention and Secondary Use
Persona privacy policy stated biometric data would be deleted within 30 days of verification. However, server logs obtained through a DSAR request by a Berlin-based privacy researcher showed templates persisted in Amazon S3 buckets for an average of 14 months. A subset of 2.3 million records was transferred to a separate analytics pipeline labeled "TrustGraph," which combined verification confidence scores with LinkedIn engagement metrics — connection acceptance rates, message response times, and profile view patterns — to generate composite employability scores. These scores were surfaced to enterprise recruiters through LinkedIn Talent Solutions at premium pricing tiers.
Discriminatory Outcomes
Analysis of rejection data leaked by a former Persona engineer revealed systemic bias in the verification pipeline. Users submitting IDs from 23 countries in Africa and Southeast Asia experienced a 34% rejection rate compared to 10% for US and EU documents. The liveness-detection model, trained predominantly on datasets from North America and Europe, showed a 2.8x higher false-rejection rate for users with darker skin tones. A class-action complaint filed in the Northern District of California in January 2026 alleges violations of the Illinois Biometric Information Privacy Act and Title VII of the Civil Rights Act.
Key Findings
- Biometric templates retained 14 months beyond stated 30-day deletion window
- Composite employability scores sold to recruiters without user knowledge
- 3.4x higher rejection rate for applicants from non-Western countries
- TrustGraph pipeline combined verification data with behavioral analytics
Timeline
LinkedIn launches Persona-powered ID verification for Verified Employer listings
Program reaches 12 million verified users across 3 markets
Berlin researcher discovers 14-month data retention via DSAR
Class-action filed in Northern District of California