News and Alerts for Week of June 12, 2023
Privacy Experts Warn Against Sharing Location Data With AI Chatbots
Google’s generative AI chatbot, Bard, recently began asking for geolocation information, which according to its privacy policy is for standard improvement and development of services. According to Cyberscoop, “privacy experts caution that the request from [the] AI chatbot represents a growing creep in data collection by large language models that could lead to an array of potential privacy harms…[including] the potential subpoenaing of that data by law enforcement, a concern that has become especially pronounced in connection to growing worries about how law enforcement may access geolocation data in cases criminalizing access to abortion.” This concern is shared by some members of Congress, who have tried to ban the sale of location data to data brokers. And the International Association of Privacy Professionals notes that, while generative AI, like ChatGPT, is new to the public, existing data privacy laws like GDPR might already regulate the technology.
Montana Governor Signs Data Privacy Law
On May 19, Montana Governor Greg Gianforte signed the Consumer Data Privacy Act (SB 384) into law, a few weeks after the Montana legislature became the first Republican-controlled body to unanimously pass a bill requiring the recognition of universal opt-out mechanisms. The bill aligns closely with Connecticut’s CTDPA, and would apply to any entity that handles the personal information of more than 50,000 Montana residents. The bill also creates special restrictions on targeted advertising using children’s data. The bill does not allow a private right of action, but allows businesses a right to cure violations until 2026.
Denmark Eyes New Privacy Protections for Children
Denmark’s government wants to follow in Germany’s footsteps and increase protections for data belonging to children, according to Reuters. The changes would include raising the age of consent for sharing personal data from 13 to between 15 and 16. Business minister Morten Bodskov is on record saying “We must put an end to their opaque algorithms, which use crazy methods to keep children and adults in front of the screen and harvest unimaginable amounts of personal information.” Other countries, including the U.S. and the Netherlands, have similar bills in the works.
BREACH REPORT:
* * * * * * *
To read our latest article on Texas’ latest privacy law, Explainer: Texas’s Data Privacy Law, click here.
Jody Westby hosts our podcast, ADCG on Privacy & Cybersecurity, bringing together leaders in the privacy and cybersecurity arenas to discuss a wide range of issues ranging from the proposed federal and state regulations to best practices and standards for compliance. Episodes can be enjoyed on many platforms including Spotify and Apple Podcasts. Don’t forget to subscribe!
Our most recently released episodes:
92 | Interview With Tom Kemp, Silicon Valley Privacy Advocate and Author of Containing Big Tech
91 | Managed Detection & Response; The Path Forward
90 | AdTech Meets Privacy Laws
To browse our previously published articles and news alerts, please visit our website, and don’t forget to subscribe to receive free weekly Data and Cyber Governance news and Breach Reports directly to your email.