[ad_1]
Google X received nine data protection complaints across Europe on Monday (August 12), just days after the company said it would suspend processing the personal data of some EU users to develop artificial intelligence (AI).
On August 6, the Irish Data Protection Commission (DPC) Request a court order Elon Musk’s platform suspended or restricted the processing of personal data of EU users’ public posts to train Grok. Two days later, X Agree to stop processing this data It will be collected between May 7 and August 1, until the court decides on the DPC’s request.
As the company’s European headquarters are in Dublin, the Irish DPC is responsible for monitoring X’s compliance with the EU’s General Data Protection Regulation (GDPR). Grok was developed by xAI, a company founded by Musk, and is used as a Search Assistant Available for premium accounts on social media platforms.
The complaints were filed in Austria, Belgium, France, Greece, Ireland, Italy, the Netherlands, Spain and Poland by Noyb, a digital rights NGO founded by influential activist and lawyer Max Schrems.
Noyb argued in a filing that the DPC did not get to the heart of the issue, which is the legality of the processing itself, but instead based its findings on oral arguments in the Irish High Court, which explored X’s mitigation measures and cooperation with authorities. Monday News Release.
Noyb therefore filed a complaint to enable a full investigation of X’s practices to ensure compliance with GDPR. Noyb requested urgent proceedings, including a decision by the European Data Protection Board (EDPB), which oversees the application of data protection regulations throughout the EU.
Noyb believes that X violated GDPR principles as well as transparency and operational rules.
The group also questioned how X’s plan would be implemented, as it had not yet made clear what would happen to EU data already fed into the AI system, and how EU and non-EU data would be separated.
Questions about DPC
The DPC’s record on enforcing GDPR has been questioned by digital rights advocates over the past few years.
“Over the past few years, we have seen countless instances of inefficiency and inadequate enforcement by the DPC,” said Schrems, chairman and founder of Noyb, in a press release.
Observers believe that the DPC’s decision to bring X to court shows that New leadership since FebruaryThe DPC said it was the first time a leading data protection authority had applied to the courts for an order to suspend a company’s data processing.
But Noyb isn’t convinced. The digital rights NGO believes that involving more data protection authorities will force the DPC to “follow up” on the case and force X to truly comply with the GDPR.
agree
The digital rights NGO said the DPC sidestepped the core issue that X did not even properly ask users to consent to this data processing.
ten Changes to the Privacy Policy Starting in September 2023, data processing for training AI will be included.
According to the judge in the case, data processing by Grok for EU users began on May 7, without giving users the option to opt out. irish censor.
This move did not mitigate the risks previously disclosed in Company X’s own risk assessment, as required by EU law. Johnny Ryan
It is unclear when the DPC became aware of this, but Ryan said the agency and the company had discussions in July.
proposal Ryan said “enhanced” mitigation measures will begin on July 16, 2024. Ryan and Irish Examiner.
X users are only aware that their data is actively processed to train AI in the following ways: Viral Posts On July 26, Neub said.
(Editing by Chris Powers)
Read more by Euractiv
[ad_2]
Source link
