An app that can age a face by decades may have lasting implications for its users. FaceApp has come under scrutiny for its privacy policy and practices in an environment of increasing fines for privacy law violations – the U.K. Information Commissioner’s Office recently issued a warning about the app. We spoke to Paula Barrett, a partner at Eversheds Sutherland in London, about the deficiencies in FaceApp’s privacy policy and terms and conditions, what companies can learn from FaceApp’s mistakes, the enforcement climate in the U.K., how to face regulators across jurisdictions, and whether the GDPR affects innovation. See CSLR’s two-part interview with Irish Data Protection Commissioner Helen Dixon: “GDPR Enforcement Hurdles One Year In” (May 29, 2019); and “Breach Notification, the Role of the DPO and a U.S. Privacy Law” (Jun. 5, 2019).