Copyright Cases Should Not Threaten Chatbot Users’ Privacy; Electronic Frontier Foundation (EFF), June 23, 2025

 TORI NOBLE, Electronic Frontier Foundation (EFF); Copyright Cases Should Not Threaten Chatbot Users’ Privacy

"Like users of all technologies, ChatGPT users deserve the right to delete their personal data. Nineteen U.S. States, the European Union, and a host of other countries already protect users’ right to delete. For years, OpenAI gave users the option to delete their conversations with ChatGPT, rather than let their personal queries linger on corporate servers. Now, they can’t. A badly misguided court order in a copyright lawsuit requires OpenAI to store all consumer ChatGPT conversations indefinitely—even if a user tries to delete them. This sweeping order far outstrips the needs of the case and sets a dangerous precedent by disregarding millions of users’ privacy rights.

The privacy harms here are significant. ChatGPT’s 300+ million users submit over 1 billion messages to its chatbots per day, often for personal purposes. Virtually any personal use of a chatbot—anything from planning family vacations and daily habits to creating social media posts and fantasy worlds for Dungeons and Dragons games—reveal personal details that, in aggregate, create a comprehensive portrait of a person’s entire life. Other uses risk revealing people’s most sensitive information. For example, tens of millions of Americans use ChatGPT to obtain medical and financial information. Notwithstanding other risks of these uses, people still deserve privacy rights like the right to delete their data. Eliminating protections for user-deleted data risks chilling beneficial uses by individuals who want to protect their privacy."

Pope: Intelligence is seeking life's true meaning, not having reams of data; United States Conference of Catholic Bishops, June 20, 2025

Carol Glatz , United States Conference of Catholic Bishops; Pope: Intelligence is seeking life's true meaning, not having reams of data

"Access to vast amounts of data and information is not the same thing as having intelligence, which is uniquely human and requires being open to truth, goodness and the real meaning of life, Pope Leo XIV told AI experts and executives.

"Authentic wisdom has more to do with recognizing the true meaning of life than with the availability of data," he said in a written message released by the Vatican June 20.

"Acknowledging and respecting what is uniquely characteristic of the human person is essential to the discussion of any adequate ethical framework for the governance of AI," he wrote.

The message, written in English, was addressed to people attending the second annual Rome conference on AI, Ethics and the Future of Corporate Governance being held in Rome and at the Vatican June 19-20.

The conference "brings together executives from leading AI companies as well as large enterprises using AI with policymakers, scholars, ethicists and lawyers to consider in a holistic way the challenges facing the ethics and governance of AI, both for companies developing this revolutionary technology as well as the enterprises incorporating AI into their businesses," according to the event's website."

OpenAI to appeal copyright ruling in NY Times case as Altman calls for 'AI privilege'; Foxbusiness, June 6, 2025

 Bradford Betz, Foxbusiness; OpenAI to appeal copyright ruling in NY Times case as Altman calls for 'AI privilege'

"The OpenAI co-founder said the case has accelerated the need for a conversation about "AI privilege," in which "talking to an AI should be like talking to a lawyer or a doctor.""

Government AI copyright plan suffers fourth House of Lords defeat; BBC, June 2, 2025

 Zoe Kleinman , BBC; Government AI copyright plan suffers fourth House of Lords defeat

"The argument is over how best to balance the demands of two huge industries: the tech and creative sectors. 

More specifically, it's about the fairest way to allow AI developers access to creative content in order to make better AI tools - without undermining the livelihoods of the people who make that content in the first place.

What's sparked it is the Data (Use and Access) Bill.

This proposed legislation was broadly expected to finish its long journey through parliament this week and sail off into the law books. 

Instead, it is currently stuck in limbo, ping-ponging between the House of Lords and the House of Commons.

A government consultation proposes AI developers should have access to all content unless its individual owners choose to opt out. 

But 242 members of the House of Lords disagree with the bill in its current form.

They think AI firms should be forced to disclose which copyrighted material they use to train their tools, with a view to licensing it."

It’s called the Library of Congress. But Trump claims it’s his.; The Washington Post, May 31, 2025

Meryl Kornfield

 and 

Hannah Natanson

, The Washington Post ; It’s called the Library of Congress. But Trump claims it’s his.

[Kip Currier: The Library of Congress (LC) is not a traditional "lending library" and access to its materials is largely limited to research purposes.

The books and materials in LC's collections are not borrowable by children.

Repeat: Not Borrowable by Children.

Karoline Leavitt fundamentally misrepresents what LC does and would be well-advised to do some basic homework on the nation's de facto national library.]

[Excerpt]

"White House press secretary Karoline Leavitt had decried the prior library leadership, referring to books that were not appropriate for children, even though the library does not lend books to children. Individuals cannot borrow directly from the Library of Congress, though the research library does lend its books to other libraries.

“There were quite concerning things that she had done at the Library of Congress in the pursuit of DEI and putting inappropriate books in the library for children,” she said in a press briefing, referring to former librarian Carla Hayden and diversity, equity and inclusion programs...

Controlling the Library would give the administration the ability to shape and inspect millions of records, everything from copyright documents to confidential research requests from lawmakers, said three library employees, all of whom spoke on the condition of anonymity for fear of retaliation.

The list of the library’s domains is long and impressive.

The library runs the Congress.gov website, which aggregates all data and records from the legislative branch. It also maintains the copyrights database and registration portals, which include any idea ever submitted for copyright protection, and houses the Congressional Office for International Leadership, which conducts civic leadership training for politicians in former communist countries, including Ukraine. The library’s Adams Building is home to the Office of Congressional Workplace Rights, which handles and stores sexual harassment complaints, among other things."

U.S. autism data project sparks uproar over ethics, privacy and intent; The Washington Post, April 25, 2025

Ariana Eunjung Cha

, 

Caitlin Gilbert

 and 

Fenit Nirappil

 , The Washington Post; U.S. autism data project sparks uproar over ethics, privacy and intent

"The Trump administration has retreated from a controversial plan for a national registry of people with autism just days after announcing it as part of a new health initiative that would link personal medical records to information from pharmacies and smartwatches.

Jay Bhattacharya, director of the National Institutes of Health, unveiled the broad, data-driven initiative to a panel of experts Tuesday, saying it would include “national disease registries, including a new one for autism” that would accelerate research into the rapid rise in diagnoses of the condition.

The announcement sparked backlash in subsequent days over potential privacy violations, lack of consent and the risk of long-term misuse of sensitive data.

The Trump administration still will pursue large-scale data collection, but without the registry that drew the most intense criticism, the Department of Health and Human Services said."

Trump Wants to Merge Government Data. Here Are 314 Things It Might Know About You.; The New York Times, April 9, 2025

Emily Badger and Sheera Frenkel, The New York Times ; Trump Wants to Merge Government Data. Here Are 314 Things It Might Know About You.

"The federal government knows your mother’s maiden name and your bank account number. The student debt you hold. Your disability status. The company that employs you and the wages you earn there. And that’s just a start...

These intimate details about the personal lives of people who live in the United States are held in disconnected data systems across the federal government — some at the Treasury, some at the Social Security Administration and some at the Department of Education, among other agencies.

The Trump administration is now trying to connect the dots of that disparate information. Last month, President Trump signed an executive order calling for the “consolidation” of these segregated records, raising the prospect of creating a kind of data trove about Americans that the government has never had before, and that members of the president’s own party have historically opposed.

The effort is being driven by Elon Musk, the world’s richest man, and his lieutenants with the Department of Government Efficiency, who have sought access to dozens of databases as they have swept through agencies across the federal government. Along the way, they have elbowed past the objections of career staff, data security protocols, national security experts and legal privacy protections."

Delete your DNA from 23andMe right now; The Washington Post, March 24, 2025

 Geoffrey A. Fowler, The Washington Post; Delete your DNA from 23andMe right now

"The company said there will be “no changes” to the way it protects consumer data while in bankruptcy court. But unless you take action, there is a risk your genetic information could end up in someone else’s hands — and used in ways you had never considered. It took me just a minute to delete my data on the 23andMe website, and I’ve got instructions on how to do it below.

It’s a privacy nightmare, but also an example of how state privacy laws pioneered in California can help protect Americans — at least the proactive ones...

The California Consumer Protection Act of 2018 gives you the right to delete data from businesses that collect it. While the law specifically applies to California residents, many other states have passed similar laws.

And California also has a separate law pertaining to DNA data, called the Genetic Information Privacy Act. It gives you the right to delete your account, have your biological sample destroyed, and revoke consent you may have previously given to use or disclose your genetic data."

Why I regret using 23andMe: I gave up my DNA just to find out I’m British; The Guardian, November 30, 2024

 Kari Paul, The Guardian; Why I regret using 23andMe: I gave up my DNA just to find out I’m British

"With the future of 23andMe in peril, the overarching question among previous customers now is what will happen to the data that has already been collected. Leuenberger noted that by entering DNA into a database, users sacrifice not only their own privacy but that of blood relatives. Because an individual’s DNA is similar in structure to that of their relatives, information about others can be gleaned from one person’s sample. This is especially pronounced with the rise of open-access DNA sites like GEDMatch, on which users can upload genetic data that can be compared to other samples. A consumer genealogy test contributed to the identification of serial killer Joseph James DeAngelo.

“What is ethically tricky with genetic data is that it’s not just about self-knowledge – it’s also knowledge about all of your relatives,” Leuenberger said. “Morally speaking, it is not necessarily information that is yours to give – and this risk is exacerbated if this company goes down and the fate of the data becomes more perilous.”"

What 23andMe Owes its Users; The Hastings Center, November 18, 2024

 Jonathan LoTempio, Jr,, The Hastings Center; What 23andMe Owes its Users

"In the intervening years, 23andMe has sent you new findings related to your health status. You wonder: Is my data protected? Can I get it back?

There are protections for users of 23andMe and other direct-to-consumer genetic testing companies. Federal laws, including the Genetic Information Nondiscrimination Act (GINA) and the Affordable Care Act, protect users from employment and insurance discrimination. Residents of certain states including California have agencies where they can register complaints. 23andMe, which is based in California, has a policy in line with California citizens’ new right to access and delete their data. European residents have even more extensive rights over their digital data.

American users can rest assured that there are strong legal mechanisms under the Committee on Foreign Investment in the U.S. that can block foreign acquisition of U.S. firms on national security grounds. For certain critical sectors like biotech, the committee may consider, among other factors, whether a proposed transaction would result in the U.S. losing its place as a global industry leader as part of its review.

Any attempt by a foreign company to acquire 23andMe would be subject to a CFIUS review and could be blocked on national security grounds, particularly if the foreign company is headquartered in a “country of special concern” such as China, Russia, or Iran. As for acquisitions by U.S. companies, the legal landscape is a bit more Wild West. Buyers based in the U.S. could change policies to which users agreed long ago, in a world rather different than ours.

November 2024: With a new board the immediate crisis at 23andMe has been averted. However, long-term concerns remain regarding potential buyers and how they might respond to 23andMe’s layoffs and shuttering of its drug development arm, both of which suggest instability of the company. 23andMe and other DTC genetic testing companies should consider what they owe their users.

One thing they owe users is to implement a policy that, in the case of a sale, the companies will notify users multiple times and in multiple ways and give them the option of deleting their data."

What AI knows about you; Axios, November 4, 2024

Ina Friend, Axios; What AI knows about you

"Most AI builders don't say where they are getting the data they use to train their bots and models — but legally they're required to say what they are doing with their customers' data.

The big picture: These data-use disclosures open a window onto the otherwise opaque world of Big Tech's AI brain-food fight.

• In this new Axios series, we'll tell you, company by company, what all the key players are saying and doing with your personal information and content.

Why it matters: You might be just fine knowing that picture you just posted on Instagram is helping train the next generative AI art engine. But you might not — or you might just want to be choosier about what you share.

Zoom out: AI makers need an incomprehensibly gigantic amount of raw data to train their large language and image models. 

• The industry's hunger has led to a data land grab: Companies are vying to teach their baby AIs using information sucked in from many different sources — sometimes with the owner's permission, often without it — before new laws and court rulings make that harder. 

Zoom in: Each Big Tech giant is building generative AI models, and many of them are using their customer data, in part, to train them.

• In some cases it's opt-in, meaning your data won't be used unless you agree to it. In other cases it is opt-out, meaning your information will automatically get used unless you explicitly say no. 
• These rules can vary by region, thanks to legal differences. For instance, Meta's Facebook and Instagram are "opt-out" — but you can only opt out if you live in Europe or Brazil.
• In the U.S., California's data privacy law is among the laws responsible for requiring firms to say what they do with user data. In the EU, it's the GDPR."

WITHOUT KNOWLEDGE OR CONSENT; ProPublica, October 24, 2024

Corey G. Johnson , ProPublica; WITHOUT KNOWLEDGEOR CONSENT

"FOR YEARS, America’s most iconic gun-makers turned over sensitive personal information on hundreds of thousands of customers to political operatives.

Those operatives, in turn, secretly employed the details to rally firearm owners to elect pro-gun politicians running for Congress and the White House, a ProPublica investigation has found.

The clandestine sharing of gun buyers’ identities — without their knowledge and consent — marked a significant departure for an industry that has long prided itself on thwarting efforts to track who owns firearms in America.

At least 10 gun industry businesses, including Glock, Smith & Wesson, Remington, Marlin and Mossberg, handed over names, addresses and other private data to the gun industry’s chief lobbying group, the National Shooting Sports Foundation. The NSSF then entered the gun owners’ details into what would become a massive database.

The data initially came from decades of warranty cards filled out by customers and returned to gun manufacturers for rebates and repair or replacement programs.

A ProPublica review of dozens of warranty cards from the 1970s through today found that some promised customers their information would be kept strictly confidential. Others said some information could be shared with third parties for marketing and sales. None of the cards informed buyers their details would be used by lobbyists and consultants to win elections."

23andMe is on the brink. What happens to all its DNA data?; NPR, October 3, 2024

 Bobby Allyn, NPR; 23andMe is on the brink. What happens to all its DNA data?

"As 23andMe struggles for survival, customers like Wiles have one pressing question: What is the company’s plan for all the data it has collected since it was founded in 2006?

“I absolutely think this needs to be clarified,” Wiles said. “The company has undergone so many changes and so much turmoil that they need to figure out what they’re doing as a company. But when it comes to my genetic data, I really want to know what they plan on doing.”

What You Need to Know About Grok AI and Your Privacy; Wired, September 10, 2024

Kate O'Flaherty , Wired; What You Need to Know About Grok AI and Your Privacy

"Described as “an AI search assistant with a twist of humor and a dash of rebellion,” Grok is designed to have fewer guardrails than its major competitors. Unsurprisingly, Grok is prone to hallucinations and bias, with the AI assistant blamed for spreading misinformation about the 2024 election."

LinkedIn is training AI on you — unless you opt out with this setting; The Washington Post, September 23, 2024

Chris Velazco , The Washington Post; LinkedIn is training AI on you — unless you opt out with this setting

"To opt out, log into your LinkedIn account, tap or click on your headshot, and open the settings. Then, select “Data privacy,” and turn off the option under “Data for generative AI improvement.”

Flipping that switch will prevent the company from feeding your data to its AI, with a key caveat: The results aren’t retroactive. LinkedIn says it has already begun training its AI models with user content, and that there’s no way to undo it."

This is the best privacy setting that almost no one is using; The Washington Post, September 6, 2024

 Shira Ovide, The Washington Post; This is the best privacy setting that almost no one is using

"Privacy laws in some states, notably California, give people the right to tell most businesses not to sell or share information they collect or in some cases to delete data about you. Some companies apply California’s privacy protections to everyone.

To take advantage of those privacy rights, though, you often must fill out complicated forms with dozens of companies. Hardly anyone does. The opt-out rights give you power in principle, but not in practice.

But baked into some state privacy laws is the option to enlist someone else to handle the legwork for you.

That wand-wielding privacy fairy godmother can be Consumer Reports, whose app can help you opt out of companies saving and selling your data. Even better, the godmother could just be a checkbox you click once to order every company to keep your data secret."

Breaking Up Google Isn’t Nearly Enough; The New York Times, August 27, 2024

Julia Angwin , The New York Times; Breaking Up Google Isn’t Nearly Enough

"Competitors need access to something else that Google monopolizes: data about our searches. Why? Think of Google as the library of our era; it’s the first stop we go to when seeking information. Anyone who wants to build a rival library needs to know what readers are looking for in order to stock the right books. They also need to know which books are most popular, and which ones people return quickly because they’re no good."

Leaving Your Legacy Via Death Bots? Ethicist Shares Concerns; Medscape, August 21, 2024

Arthur L. Caplan, PhD, Medscape ; Leaving Your Legacy Via Death Bots? Ethicist Shares Concerns

"On the other hand, there are clearly many ethical issues about creating an artificial version of yourself. One obvious issue is how accurate this AI version of you will be if the death bot can create information that sounds like you, but really isn't what you would have said, despite the effort to glean it from recordings and past information about you. Is it all right if people wander from the truth in trying to interact with someone who's died? 

There are other ways to leave memories behind. You certainly can record messages so that you can control the content. Many people video themselves and so on. There are obviously people who would say that they have a diary or have written information they can leave behind. 

Is there a place in terms of accuracy for a kind of artificial version of ourselves to go on forever? Another interesting issue is who controls that. Can you add to it after your death? Can information be shared about you with third parties who don't sign up for the service? Maybe the police take an interest in how you died. You can imagine many scenarios where questions might come up about wanting to access these data that the artificial agent is providing. 

Some people might say that it's just not the way to grieve.Maybe the best way to grieve is to accept death and not try to interact with a constructed version of yourself once you've passed. That isn't really accepting death. It's a form, perhaps, of denial of death, and maybe that isn't going to be good for the mental health of survivors who really have not come to terms with the fact that someone has passed on."

A booming industry of AI age scanners, aimed at children’s faces; The Washington Post, August 7, 2024

Drew Harwell, The Washington Post ; A booming industry of AI age scanners, aimed at children’s faces

"Nineteen states, home to almost 140 million Americans, have passed or enacted laws requiring online age checks since the beginning of last year, including Virginia, Texas and Florida. For the companies, that’s created a gold mine: Employees at Incode, a San Francisco firm that runs more than 100 million verifications a year, now internally track state bills and contact local officials to, as senior director of strategy Fernanda Sottil said, “understand where … our tech fits in.”

But while the systems are promoted for safeguarding kids, they can only work by inspecting everyone — surveying faces, driver’s licenses and other sensitive data in vast quantities. Alex Stamos, the former security chief of Facebook, which uses Yoti, said “most age verification systems range from ‘somewhat privacy violating’ to ‘authoritarian nightmare.'”"

Justice Department sues TikTok, accusing the company of illegally collecting children’s data; AP, August 2, 2024

HALELUYA HADERO, AP; Justice Department sues TikTok, accusing the company of illegally collecting children’s data

"The Justice Department sued TikTok on Friday, accusing the company of violating children’s online privacy law and running afoul of a settlement it had reached with another federal agency. 

The complaint, filed together with the Federal Trade Commission in a California federal court, comes as the U.S. and the prominent social media company are embroiled in yet another legal battle that will determine if – or how – TikTok will continue to operate in the country. 

The latest lawsuit focuses on allegations that TikTok, a trend-setting platform popular among young users, and its China-based parent company ByteDance violated a federal law that requires kid-oriented apps and websites to get parental consent before collecting personal information of children under 13. It also says the companies failed to honor requests from parents who wanted their children’s accounts deleted, and chose not to delete accounts even when the firms knew they belonged to kids under 13."