Showing posts with label PII. Show all posts
Showing posts with label PII. Show all posts

Monday, February 3, 2025

MUSK, TRUMP PROSECUTOR TARGETING PEOPLE WHO DIVULGE IDENTITIES OF DOGE STAFF; Rolling Stone, February 3, 2025

MILES KLEE , Rolling Stone; MUSK, TRUMP PROSECUTOR TARGETING PEOPLE WHO DIVULGE IDENTITIES OF DOGE STAFF

"As a cabal of Elon Musk flunkies works around the clock to infiltrate and sabotage various federal agencies on behalf of President Donald Trump, the world’s richest man — just named a special government employee — is warning along with Washington allies that the consequences for publicly naming these staffers may be severe.

On Sunday, with Musk’s Department of Government Efficiency (DOGE) seizing control of the United States Agency for International Development (USAID) and the billionaire vowing to eliminate it altogether, Wired reported the identities of six software engineers with jobs in his wrecking crew. They span in age from 19 to their mid-twenties and have minimal government experience (if any), though most have connections to either Musk or his onetime PayPal colleague Peter Thiel, another right-wing Silicon Valley billionaire whose data analytics firm Palantir holds valuable U.S. defense contracts. They are Akash Bobba, Edward Coristine, Luke Farritor, Gautier Cole Killian, Gavin Kliger, and Ethan Shaotran.

These young men have been involved in Musk’s sweeping efforts to gain access to the communication systems, personnel files, and other sensitive information at agencies including USAID, the Treasury Department, the Office of Personnel Management, the General Services Administration, and the Small Business Administration, in certain cases freezing employees out of their work accounts and putting others on leave... 

Musk, who professes to champion free speech but has typically clamped down on content shared via his social media platform X if he doesn’t want it publicly disseminated, has already moved to silence those who share the names of DOGE team members carrying out his orders to wrest control of the levers of federal spending."

The Young, Inexperienced Engineers Aiding Elon Musk’s Government Takeover; Wired, February 2, 2025

 Vittoria Elliott, Wired; The Young, Inexperienced Engineers Aiding Elon Musk’s Government Takeover

"The engineers are Akash Bobba, Edward Coristine, Luke Farritor, Gautier Cole Killian, Gavin Kliger, and Ethan Shaotran. None have responded to requests for comment from WIRED. Representatives from OPM, GSA, and DOGE did not respond to requests for comment.

The six men are one part of the broader project of Musk allies assuming key government positions. Already, Musk’s lackeys—including more senior staff from xAI, Tesla, and the Boring Company—have taken control of the Office of Personnel Management (OPM) and General Services Administration (GSA), and have gained access to the Treasury Department’s payment system, potentially allowing him access to a vast range of sensitive information about tens of millions of citizens, businesses, and more. On Sunday, CNN reported that DOGE personnel attempted to improperly access classified information and security systems at the US Agency for International Development and that top USAID security officials who thwarted the attempt were subsequently put on leave. The Associated Press reported that DOGE personnel had indeed accessed classified material."

Saturday, November 30, 2024

Why I regret using 23andMe: I gave up my DNA just to find out I’m British; The Guardian, November 30, 2024

 , The Guardian; Why I regret using 23andMe: I gave up my DNA just to find out I’m British

"With the future of 23andMe in peril, the overarching question among previous customers now is what will happen to the data that has already been collected. Leuenberger noted that by entering DNA into a database, users sacrifice not only their own privacy but that of blood relatives. Because an individual’s DNA is similar in structure to that of their relatives, information about others can be gleaned from one person’s sample. This is especially pronounced with the rise of open-access DNA sites like GEDMatch, on which users can upload genetic data that can be compared to other samples. A consumer genealogy test contributed to the identification of serial killer Joseph James DeAngelo.

“What is ethically tricky with genetic data is that it’s not just about self-knowledge – it’s also knowledge about all of your relatives,” Leuenberger said. “Morally speaking, it is not necessarily information that is yours to give – and this risk is exacerbated if this company goes down and the fate of the data becomes more perilous.”"

Wednesday, November 20, 2024

What 23andMe Owes its Users; The Hastings Center, November 18, 2024

 Jonathan LoTempio, Jr,, The Hastings Center; What 23andMe Owes its Users

"In the intervening years, 23andMe has sent you new findings related to your health status. You wonder: Is my data protected? Can I get it back?

There are protections for users of 23andMe and other direct-to-consumer genetic testing companies. Federal laws, including the Genetic Information Nondiscrimination Act (GINA) and the Affordable Care Act, protect users from employment and insurance discrimination. Residents of certain states including California have agencies where they can register complaints. 23andMe, which is based in California, has a policy in line with California citizens’ new right to access and delete their data. European residents have even more extensive rights over their digital data.

American users can rest assured that there are strong legal mechanisms under the Committee on Foreign Investment in the U.S. that can block foreign acquisition of U.S. firms on national security grounds. For certain critical sectors like biotech, the committee may consider, among other factors, whether a proposed transaction would result in the U.S. losing its place as a global industry leader as part of its review.

Any attempt by a foreign company to acquire 23andMe would be subject to a CFIUS review and could be blocked on national security grounds, particularly if the foreign company is headquartered in a “country of special concern” such as China, Russia, or Iran. As for acquisitions by U.S. companies, the legal landscape is a bit more Wild West. Buyers based in the U.S. could change policies to which users agreed long ago, in a world rather different than ours.

November 2024: With a new board the immediate crisis at 23andMe has been averted. However, long-term concerns remain regarding potential buyers and how they might respond to 23andMe’s layoffs and shuttering of its drug development arm, both of which suggest instability of the company. 23andMe and other DTC genetic testing companies should consider what they owe their users.

One thing they owe users is to implement a policy that, in the case of a sale, the companies will notify users multiple times and in multiple ways and give them the option of deleting their data."

Wednesday, August 7, 2024

A booming industry of AI age scanners, aimed at children’s faces; The Washington Post, August 7, 2024

, The Washington Post ; A booming industry of AI age scanners, aimed at children’s faces

"Nineteen states, home to almost 140 million Americans, have passed or enacted laws requiring online age checks since the beginning of last year, including Virginia, Texas and Florida. For the companies, that’s created a gold mine: Employees at Incode, a San Francisco firm that runs more than 100 million verifications a year, now internally track state bills and contact local officials to, as senior director of strategy Fernanda Sottil said, “understand where … our tech fits in.”

But while the systems are promoted for safeguarding kids, they can only work by inspecting everyone — surveying faces, driver’s licenses and other sensitive data in vast quantities. Alex Stamos, the former security chief of Facebook, which uses Yoti, said “most age verification systems range from ‘somewhat privacy violating’ to ‘authoritarian nightmare.'”"

Saturday, July 6, 2024

THE GREAT SCRAPE: THE CLASH BETWEEN SCRAPING AND PRIVACY; SSRN, July 3, 2024

Daniel J. SoloveGeorge Washington University Law School; Woodrow HartzogBoston University School of Law; Stanford Law School Center for Internet and SocietyTHE GREAT SCRAPETHE CLASH BETWEEN SCRAPING AND PRIVACY

"ABSTRACT

Artificial intelligence (AI) systems depend on massive quantities of data, often gathered by “scraping” – the automated extraction of large amounts of data from the internet. A great deal of scraped data is about people. This personal data provides the grist for AI tools such as facial recognition, deep fakes, and generative AI. Although scraping enables web searching, archival, and meaningful scientific research, scraping for AI can also be objectionable or even harmful to individuals and society.


Organizations are scraping at an escalating pace and scale, even though many privacy laws are seemingly incongruous with the practice. In this Article, we contend that scraping must undergo a serious reckoning with privacy law. Scraping violates nearly all of the key principles in privacy laws, including fairness; individual rights and control; transparency; consent; purpose specification and secondary use restrictions; data minimization; onward transfer; and data security. With scraping, data protection laws built around

these requirements are ignored.


Scraping has evaded a reckoning with privacy law largely because scrapers act as if all publicly available data were free for the taking. But the public availability of scraped data shouldn’t give scrapers a free pass. Privacy law regularly protects publicly available data, and privacy principles are implicated even when personal data is accessible to others.


This Article explores the fundamental tension between scraping and privacy law. With the zealous pursuit and astronomical growth of AI, we are in the midst of what we call the “great scrape.” There must now be a great reconciliation."

Wednesday, May 15, 2024

Illinois Attorney General Kwame Raoul sues company for publishing voters’ personal data; Chicago Sun-Times, May 9, 2024

 

, Chicago Sun-Times; Illinois Attorney General Kwame Raoul sues company for publishing voters’ personal data

"A publishing company whose politically-slanted newspapers have been derided as “pink slime” is being sued by Illinois Attorney General Kwame Raoul for illegally identifying birthdates and home addresses of “hundreds of thousands” of voters.

Raoul’s legal move against Local Government Information Services accuses the company of publishing sensitive personal data that could subject voters across Illinois to identity theft.
Among those whose personal data has been identified on LGIS’ nearly three dozen online websites are current and former judges, police officers, high-ranking state officials and victims of domestic violence and human trafficking, Raoul’s filing said."

Thursday, May 2, 2024

T-Mobile, AT&T, Sprint, Verizon slapped with $200M fine — here’s what they illegally did with your data; Mashable, April 30, 2024

Matt Binder, Mashable ; T-Mobile, AT&T, Sprint, Verizon slapped with $200M fine — here’s what they illegally did with your data

"AT&T, Verizon, Sprint, and T-Mobile allegedly provided location data to third parties without their users' consent, which is illegal.

“Our communications providers have access to some of the most sensitive information about us," said FCC Chairwoman Jessica Rosenworcel in a statement. "These carriers failed to protect the information entrusted to them. Here, we are talking about some of the most sensitive data in their possession: customers’ real-time location information, revealing where they go and who they are.” 

FCC fines the biggest U.S. mobile carriers

According to the FCC, T-Mobile has been fined the largest amount: $80 million. Sprint, which has merged with T-Mobile since the FCC's investigation began, also received a $12 million fine.

AT&T will have to pay more than $57 million and Verizon will dole out close to $47 million."