Meta’s AI ambitions are once again coming under fire following privacy advocacy group, NOYB’s filing of complaints in 11 countries over the tech giant’s plans to use personal data for AI training.

NOYB has urged regulators in 10 EU states and Norway to intervene prior to the implementation of Meta’s new privacy policy on June 26. The policy change would allow Meta to utilise vast swathes of personal data, including posts, private images, and tracking information, sparking concerns over potential privacy violations.

In an official statement, NYOB said: 

“Unlike the already problematic situation of companies using certain (public) data to train a specific AI system (eg a chatbot), Meta’s new privacy policy basically says that the company wants to take all public and non-public user data that it has collected since 2007 and use it for any undefined type of current and future ‘artificial intelligence technology.

“This includes the many ‘dormant’ Facebook accounts users hardly interact with anymore — but which still contain huge amounts of personal data.” 

The measures were made public last month by Meta via a Facebook email giving account holders the opportunity to opt out of the changes. 

A segment of the email read:

“AI at Meta is our collection of generative AI features and experiences, such as Meta AI and AI creative tools, along with the models that power them. … To help bring these experiences to you, we’ll now rely on the legal basis called legitimate interests for using your information to develop and improve AI at meta. This means that you have the right to object to how your information is used for these purposes. If your objection is honoured, it will be applied from then on.”

Speaking to CSO Online, Pareekh Jain, CEO of Pareekh Consulting, said:

“The responsibility likely shifts to the entity providing the model, while the user might be exempt from liability. Using another company’s model, such as Meta’s or any large enterprise’s, places the responsibility on the creator of the model to use data wisely. Users typically don’t face legal issues.”

Jain underlined how more severe privacy regulations could lead to only bigger corporations being able to surmount legal costs and privacy challenges, with smaller firms left with their hands tied.

Know the risks

NYOB’s continuing struggle against Meta’s privacy policy highlights the complex data privacy issues that arise from the use of consumer information for developing AI tools. More broadly, it asks questions over responsibility that must be answered in order to achieve compliance.

The issues are examined in depth this October at #RISK London, where industry leaders explore the importance of regulatory compliance, ethical responsibility, and user-centric practices in data processing standards in the AI era.

#RISK London 2024

We’re excited to share that #RISK is back in London for its third consecutive year, ready to equip attendees like you with the knowledge, insights, and connections crucial for navigating today’s dynamic risk landscape.

#RISK London 2024, ExCel

#RISK London 2024, 9-10 October, ExCel - GRC. AI. Privacy. Security. RegTech

Key #RISK London sessions include:

Beyond Compliance: Building a Culture of Privacy by Design

Location: PrivSec Theatre

This session will delve into the concept of “Privacy by Design,” a proactive approach that integrates privacy considerations into every stage of product development and data processing. 

Experts will explore strategies for fostering a culture of privacy within organisations, from employee awareness training to implementing data minimisation practices.

The Evolving Regulatory Landscape: Staying Compliant in a Complex World

Location: Risk Theatre

This session provides insights into the rapidly evolving regulatory landscape impacting risk management practices.

Experts will discuss regulations like GDPR, CCPA, and DORA, outlining their implications for businesses and providing strategies for achieving compliance.

These are just two of the exclusive sessions taking place at #RISK London this October

Click here to see the full agenda

Discover more at #RISK London

Taking place October 9 and 10 at London’s ExCel, #RISK London brings high-profile subject-matter experts together for a series of keynotes, engaging panel debates and presentations across four separate theatres:

• GRC Theatre

• RegTech Theatre

• PrivSec Theatre

• Risk Theatre 

Each theatre is dedicated to examining the challenges and opportunities that businesses face in times of unprecedented change.

By breaking down silos and aligning systems and workflows, organisations can streamline decision-making, improve efficiencies, and enhance the customer experience.

Attendees will be able to learn how to mitigate risks, reduce compliance breaches, and drive performance.

“#RISK is such an important event as it looks at the broad perspective. Risks are now more interconnected and the risk environment is bigger than ever before.”Michael Rasmussen, GRC Analyst & Pundit, GRC 20/20 Research

Click here to register for #RISK London today!

Risk London 2024 Logo-Updated