As much as AI has generated excitement about the efficiencies it is creating for businesses, AI is also presenting unique challenges in the area of data privacy and security. Although still in its infancy, AI privacy litigation continues to rise as the pool of defendants diversifies and regulation intensifies.
Data Privacy
Technological development has always outpaced privacy concerns, but never more so than in the past decade. Collection and centralization of personally identifiable information (PII), tracking of movements and digital surveillance are all at unprecedented levels. Regulations and laws are only just beginning to catch up to the ability of both governments and private entities to deploy these capabilities.
What exactly is there to worry about? The mass collection and centralization of data by giant multinationals such as Facebook and Google is as good of a place to start as any. Two decades of vacuuming up the personal data of users of various online services has created the most impressive marketing capabilities in history, but these profiles have astounding potential for damage when they are used the wrong way or fall into the wrong hands.
Unauthorized information that is captured in data breaches tends to find its way to massive “combo lists” that are sold and traded on the dark web. Social security numbers are added from this breach, home addresses and phone numbers from that one, personal health information from yet another. Soon, a frighteningly complete profile of millions of individuals is available to anyone willing to pay the asking price.
These are just the established data privacy issues. The emerging ones are even worse. High-quality facial recognition technology is just beginning to roll out across the public places of some countries. Artificial intelligence is not only making mass facial recognition possible, but magnifies the power and reach of any application that involves capturing and sorting information: scanning pictures, analyzing speech, sifting through text and location data. This threatens to not only shatter anonymity and privacy, but allow for highly advanced impersonation and take the concept of “identity theft” to new levels.
Some businesses chafe at the trouble and added expense of new and emerging data privacy regulations, but they are vital to both protecting rights and privacy and instilling confidence in end users. Customers want to be able to submit their payment information without worry about data breaches and identity theft, use services without wondering what is being done with their personal information and use devices without fear of surveillance or having location data tracked. The need for meaningful safeguards only grows greater as technological capabilities increase.
More stringent data collection rules went into effect in China at the beginning of May. The government continued to show that it is serious about its regulatory stance by sweeping up 33 mobile apps.
India’s new CERT-In order applies to VPN providers, virtual private server (VPS) providers, data centers and cloud service providers. These services are required to hold and turn over a variety of customer data.
Many have raised privacy concerns over FBI’s plan to develop a social media surveillance tool which will proactively identify and reactively monitor persons of interest or suspects in ongoing cases.
Majority of the respondents in Amnesty International survey indicated that privacy concerns have changed their online behavior as there's no control over how companies use their personal data.
New FAA regulations came packaged with drone tracking rules, including remote ID requirements that some of the tech giants are objecting to from a technological and privacy standpoint.
UK ICO has reached a provisional finding that TikTok failed to protect children's privacy from 2018 to 2020. If this finding holds up, TikTok could be on the hook for a £27 million fine.
The former TikTok employee worked as a risk manager in the company's Safety Operations division for six months and claims that a "complete re-engineering" of the app is the only way to secure user data.
As with Apple's new program, the proposed privacy labels are meant to give end users a quick reference to the range of data that Android apps are asking for.
Norway suspended the operation of its contact tracing app "Smittestopp" after being ranked among the world’s most privacy-invasive apps, next to Bahrain and Qatar.









