Article Details

Scrape Timestamp (UTC): 2024-07-16 15:03:22.835

Source: https://www.theregister.com/2024/07/16/campaign_group_complains_to_uk/

Original Article Text

Click to Toggle View

Privacy group complains to UK regulator about Meta scraping user data to train AI. Move follows Instagram and Facebook owner's decision to reverse direction in EU after protests. A UK data rights campaign group has launched a complaint with the data law regulator against Meta’s change of privacy policy which allows it to scrape user data to develop AI models. Open Rights Group (ORG), a UK-based membership organization that campaigns to protect privacy and free speech online, pointed out that Meta emailed Facebook and Instagram users in the UK at the end of May to warn it would introduce changes to its privacy policy on June 26. According to the ORG, Meta would “rely on the legal basis called legitimate interests” to use individuals’ information for its AI development. The complaint follows a similar protest in the European Union under the General Data Protection Regulation, which resulted in the social media biz agreeing to pause plans to train AI models on EU users' Facebook and Instagram users' posts. Although UK data protection law currently mirrors that in the EU, its decision to leave the economic and political bloc came into effect at the end of 2020. The ORG pointed out there had been no official change to the Meta privacy policy to make the ending of data processing for the development of Meta's "AI technologies" legally binding in the UK. It has therefore raised a formal regulatory complaint with the nation’s data protection regulator, the Information Commissioner’s Office (ICO). Mariano delli Santi, complainant and Legal and Policy Officer at Open Rights Group, said: “Meta’s plans to ingest its users’ data, posts and pictures will impact more than 50 million Instagram and Facebook users in the UK. It’s not acceptable that the company is making a half-hearted attempt to enable people to opt out rather than give their consent to such intrusive data processing. “The proposals appear to violate UK GDPR on a number of levels, and we urge the ICO to investigate thoroughly and stop them once and for all,” he said. The ORG added that while Meta told users they had the right to object, it did not commit to honoring objections as a matter of course and once a user’s data had been used by the company, any consent could not be applied retrospectively. The ICO has yet to respond to The Register's request for comment. In June, Meta agreed to pause its plans to train AI models on EU users' Facebook and Instagram posts following pressure from EU regulators. It said the move would delay its plans to launch Meta AI in the economic zone. In a blog following the move, Stefano Fratta, global engagement director, Meta Privacy Policy said: "We remain highly confident that our approach complies with European laws and regulations. AI training is not unique to our services, and we’re more transparent than many of our industry counterparts."

Daily Brief Summary

DATA BREACH // Privacy Concerns Over Meta's Use of UK User Data for AI

A UK-based privacy organization, Open Rights Group (ORG), has filed a complaint with the Information Commissioner's Office (ICO) concerning Meta's updated privacy policy.

Meta's revised policy allows for the scraping of personal data from Facebook and Instagram users to develop AI models.

This policy update was communicated to users in late May with an impending policy effective date of June 26.

ORG argues that Meta's data usage under the guise of 'legitimate interests' could violate the UK's GDPR rules, particularly regarding user consent and data usage for AI training.

Previously, Meta faced similar pushback in the EU, which led to a temporary halt in its AI development plans involving user data.

Despite Meta's assertions of legal compliance and transparency, concerns persist about the non-binding nature of user objections to data usage and lack of clarity in consent mechanisms.

The ICO has yet to formally respond to the complaint as the regulatory and legal review process unfolds.