DPOInsider

Share this post

DPOInsider #39

www.dpoinsider.com

DPOInsider #39

A deep dive on ChatGPT, AI and data privacy

DPOInsider
Feb 24
Share this post

DPOInsider #39

www.dpoinsider.com

The DPOInsider covers the latest news and developments in data compliance and privacy. The DPO's favourite weekly read ☕️


Let’s talk about ChatGPT and privacy

The AI tool has undoubtedly taken the world by storm. Within just a few months, it has already hit over 100 million active users.

Thanks for reading DPOInsider! Subscribe for free to receive new posts and support my work.

As you have probably heard, this makes it the fastest-growing consumer application ever launched.

The launch hasn’t been without concerns - and these have been present in a number of different industries.

But what does it mean for privacy?

ChatGPT is ultimately fueled by personal data.

This comes in the form of a large language model that requires very large amounts of data to function and improve.

OpenAI has used over 300 billion words to train its language model. This data has been systematically scraped from the internet - data that includes books, articles, websites and potentially - personal data obtained without consent.

Even this newsletter could be used to train this language model.

I was not asked for consent for this. And this is where the issue lies.

This data is publically available, but this can still breach what we call contextual integrity - a fundamental principle when discussing legal privacy. It requires that information pertaining to an individual is not used outside of the context that it was initially produced.

On top of this, how do we check what data OpenAI stores on us? Those of us familiar with GDPR understand this is a fundamental part of the GDPR - and the jury is still firmly out on whether ChatGPT is compliant with the GDPR at all.

And what about our right to be forgotten? This is an important mechanism for instances when information is misleading - something that ChatGPT has consistently returned to users.

Furthermore, the data that is delivered back to users can be verbatim copyrighted texts:

This all gets a little more suspect when we look at how prompts can be a form of user data.

When we ask the tool to answer questions or perform tasks, we may inadvertently hand over sensitive information and put it in the public domain.

Legal professionals may ask the tool to review a contract or document. Engineers or developers could ask it to review their code - but essentially, this means that valuable IP could now be part of OpenAI’s database.

For privacy professionals (and many other industries) does this mean that ChatGPT and other technologies (Google is releasing its own competitor) are a tipping point for AI, and specifically AI privacy regulation?

These privacy risks should at least be a warning for consumers and legislators. And we should all be more careful about the data that we input into these tools.


Other data privacy news

This is what increasing data protection laws mean for your company

Compliance Report Shows More Than 90% of Companies Are Not Compliant

TikTok planning 2 more data centers in Europe amid data security concerns

How’s Data Protection Doing In Your Country?


Post of the week

Twitter avatar for @RobertJBateman
Robert Bateman @RobertJBateman
CPPA: The CPRA Regulations "provide clarity and specificity to implement the law". Businesses following the CPRA Regulations:
Twitter avatar for @HoHighlights
House of Highlights @HoHighlights
This is just WILD. 🤯😳 (via andriragettli/Instagram) https://t.co/rJzekn95Fu
11:21 AM ∙ Feb 23, 2023
Twitter avatar for @clothildegouj
Clothilde Goujard @clothildegouj
❗️New: The European Commission will propose a law before the summer to improve cooperation between national privacy regulators on how they enforce the European Union’s landmark privacy rulebook, the General Data Protection Regulation (GDPR).
pro.politico.euPOLITICO Pro
8:15 AM ∙ Feb 20, 2023
154Likes91Retweets

Thanks for reading DPOInsider! Subscribe for free to receive new posts and support my work.

Share this post

DPOInsider #39

www.dpoinsider.com
Comments
TopNew

No posts

Ready for more?

© 2023 DPOinsider
Privacy ∙ Terms ∙ Collection notice
Start WritingGet the app
Substack is the home for great writing