Cybersecurity Policy Report, Meta to Use Public Content to Train AI; ICO to Monitor, (Sep 16, 2024)

By Tony Foley

Meta Platforms, Inc., said last week that it would begin training its generative artificial intelligence model in the United Kingdom using public content shared by adults on Facebook and Instagram over the coming months after incorporating feedback from the U.K.’s Information Commissioner’s Office (ICO) to ensure a transparent approach to the processing.

In June, Meta said it was pausing the use of Facebook and Instagram user content in response to a request from the Irish Data Protection Commission, a decision that the ICO applauded (CPR, June 17). Meta said Friday in a news release that it was resuming the processing of user content, noting that since the June pause, it had engaged with ICO and welcomed the agency’s guidance with respect to supporting the implementation of a legitimate interests basis for using first-party data to train generative AI models for the company’s features and experiences.

The release added that Meta would not use people’s private messages with friends and family to train AI, nor would it use information from people in the U.K. under age 18. U.K. adult users will begin to receive in-app notifications to explain what Meta is doing, including how to access an objection form to opt out of the use of their data for AI training. The company will honor all objection forms already received, as well as new objection forms going forward, and will not contact people that have already objected.

In response to Meta’s announcement, Stephen Almond ICO’s executive director–regulatory risk issued a statement on Friday noting that Meta had made changes to its original approach, including a longer window for users to submit an objection form. In light of Meta’s decision to resume its plans, Mr. Almond said ICO would monitor the company’s processing activities over the coming weeks.

“We have been clear that any organisation using its users’ information to train generative AI models needs to be transparent about how people’s data is being used,” Mr. Almond said. “Organisations should put effective safeguards in place before they start using personal data for model training, including providing a clear and simple route for users to object to the processing. The ICO has not provided regulatory approval for the processing and it is for Meta to ensure and demonstrate ongoing compliance.”

News: InternationalLegislation DataPrivacy AINews