Police arrested a man in Florida for attempted child abduction in a town he had never visited, and the only evidence linking him to the crime was an AI facial recognition hit. Represented by the American Civil Liberties Union (ACLU), he is now suing the officers and agencies who put him through it.
In November 2023, police in Jacksonville Beach, Florida, responded to a call about an attempted child abduction at a McDonald’s. Witnesses said an adult man allegedly tried to get the child, identified as a girl under 12 years old, to leave the restaurant with him. According to a police report, facial recognition software concluded with 93 percent confidence that the suspect was Robert Dillon.
In August 2024, Deputies arrested Dillon at his home in Fort Myers, Florida—hundreds of miles away, at the opposite end of the state. “Are you shitting me, man?” Dillon asked the arresting deputy. “I haven’t been out of Fort Myers in two years.” Further, he also said he had never been to Jacksonville Beach.
Dillon posted bail and pleaded not guilty to enticing or luring a child—a third-degree felony, punishable by up to five years in prison. More than two months later, prosecutors dropped the charges after his attorney provided evidence that he was at work on the day in question.
But that doesn’t excuse the fact that he was only arrested in the first place, and threatened with prosecution for a particularly heinous offense, because of shoddy police work.
The ACLU is now suing the city of Jacksonville Beach, as well as the individual police officers and officials involved in the case. According to the lawsuit, the responding officer viewed security camera footage of the suspect but didn’t take a copy; instead, he took pictures of the screen with his cell phone. “In the photos, the suspect image is low resolution, and the suspect’s face is partially shadowed and off-axis,” the lawsuit claims.
When an investigator queried the facial recognition system, it was with the officer’s grainy secondhand cell phone photos.
But there were other leads that police could have followed, to either bolster their case or point in another direction. For example, when he approached the girl, the suspect was picking up food that had been ordered ahead; this implies he had an online account, with contact information and a form of payment attached.
“These records could have been used to identify the actual person who placed the suspect’s order,” the lawsuit notes. “Upon information and belief, Jacksonville Beach PD personnel never requested or obtained mobile ordering records, payment data, or online account information from McDonald’s.”
Further, the McDonald’s manager recognized the assailant as a “regular customer”—likely precluding Dillon, who lived and worked on the other side of the state and did not frequently travel. Besides, at no point did investigators search footage for the suspect’s previous visits, either for higher quality images or transaction records. And once they settled on Dillon as a suspect, investigators could have gotten a warrant for his cell phone’s GPS data, showing whether or not he was at a fast food restaurant 300 miles away from his home on the night in question.
The lawsuit notes that when Dillon’s name came up, investigating officer Scott O’Connell queried the police database of license plate readers, which did not detect Dillon’s vehicles in Jacksonville Beach within the 48 hours surrounding the attempted abduction.