Data Privacy
Ongoing coverage on Data Privacy.
Latest coverage
Hey Meta workers, are you getting paid for those keystrokes?
Meta is reportedly capturing keystrokes, mouse movements, and clicks from its employees to train artificial intelligence models. A company spokesperson confirmed the internal tool's purpose is to gather real-world examples of computer usage. The report raises concerns about workplace surveillance, data privacy, and whether employees will be compensated for their data.
Union takes legal action against Build a Rocket Boy over alleged data privacy violations
The Independent Workers' Union of Great Britain (IWGB) has initiated legal action against Build a Rocket Boy, alleging data privacy violations due to the installation of Teramind surveillance software on employees' devices without consent. The union claims this software violates data protection laws and employee dignity by tracking keystrokes, screen activity, and audio. Build a Rocket Boy acknowledged installing the software, calling it 'enhanced cybersecurity,' and stated it would be removed within three months, though the IWGB reports it was removed in March after employee grievances.
Union workers take legal action against Build A Rocket Boy over alleged privacy violations
Unionized employees at Build A Rocket Boy (BARB) have filed legal action against the studio, alleging data privacy violations due to the installation of surveillance software called Teramind on work devices. The IWGB Game Workers Union claims BARB management has been uncooperative in disclosing what data was collected, how it was stored, and the reasons for the software's installation, which they describe as invasive and installed without consent.
Sony Has Global Plans For PlayStation Age Verification - Report
Sony Interactive Entertainment is reportedly planning a global rollout of age verification for PlayStation users to access online communication features. This initiative aims to comply with global regulations and ensure age-appropriate experiences, though users will still be able to access games and the store without verification. The company is working with Yoti for this process, despite the company facing fines for data mishandling in Spain.
Evening Legal Briefs
The US government may mandate age verification for operating systems, requiring them to share user information with third parties. This potential policy change raises significant data privacy concerns for PC users.
US may force operating systems to have mandatory age verification, share info with third parties
A new bill in the US House, the "Parents Decide Act," proposes mandatory age verification for operating systems like Windows, Linux, and MacOS during installation and use. The bill, referred to the House Committee on Energy and Commerce, would require users to provide their date of birth, with details on verification methods and data protection left to the committee. Concerns have been raised about potential privacy risks and the impact on open-source operating systems.
Anthropic will ask Claude users to verify their identities 'for a few use cases'
AI company Anthropic is implementing identity verification for certain Claude chatbot features, requiring users to submit government-issued photo IDs and selfies. This move has drawn criticism regarding data privacy, especially given the use of Persona, a service also used by OpenAI and Roblox, which has ties to Palantir. Anthropic assures users that data will be encrypted and not used for model training or shared.
Evening Safety Dance
Over 100 Google Chrome extensions were discovered to be injecting ads and harvesting user data. Separately, Microsoft addressed a prompt injection vulnerability in Copilot Studio, though data exfiltration still occurred.
Seems like opting out of website cookies doesn't actually guarantee you are opted out of website cookies
A recent audit by webXray found that major technology companies, including Google, Meta, and Microsoft, often ignore global opt-out signals for website cookies. The report indicates that many cookie banners fail to prevent tracking, leading to potential legal liabilities for companies.
'Who on Earth Would Want This?': Almost 90% of PS5 Fans Not Interested in New 'Playerbase' Program
Sony's new 'Playerbase' program, designed to celebrate the PlayStation community, has been met with significant backlash from fans. A poll indicated that almost 90% of PlayStation 5 owners are not interested, with many citing security concerns about the use of their likeness and data. The initiative, which starts with Gran Turismo 7, is criticized for being out of touch with the fanbase's desires.
UK Meta employee reportedly downloaded 30,000 private photos from Facebook users
A former Meta employee in the UK is under investigation for allegedly downloading approximately 30,000 private photos from Facebook users using a custom software program. Meta discovered the breach over a year ago, terminated the employee, notified affected users, and referred the case to law enforcement for investigation by the London Metropolitan police's cybercrime unit.
Opinion: Sony's 'Playerbase' Is a Weak and Weird Way to Celebrate PS5 Fans
Sony's new 'Playerbase' initiative, which offers fans a chance to have their likeness scanned for Gran Turismo 7 or potentially appear in other games, is criticized as a weak and unusual way to celebrate the PlayStation community. The author questions the transparency around data usage and suggests alternative methods like PS Stars for genuine fan recognition.
OkCupid settles FTC case on alleged misuse of its users' personal data
OkCupid and its parent company Match Group have settled a lawsuit with the Federal Trade Commission regarding alleged misuse of user data in 2014. The dating service was accused of sharing three million user photos and location information with a third-party AI company, Clarifai, without proper user consent. The settlement prohibits future misrepresentation of data collection practices and consumer choices, with OkCupid stating current practices are strengthened.
Here's how not to leak military information with your Strava run
The sports tracking app Strava has become a security risk, with recent incidents involving a French sailor leaking the location of an aircraft carrier and past instances of US military bases and Secret Service agents being identified. The article provides advice on how users can protect their privacy by adjusting app settings, using alternative running apps with caution, or running without a phone.
Morning Safety Dance
Meta is reportedly ending end-to-end encryption for Instagram direct messages, raising concerns about data privacy. Separately, federal agencies have disrupted large IoT botnets responsible for significant DDoS attacks.
Evening Legal Briefs
The FBI has confirmed its acquisition of American location data. This news was reported by Engadget, raising concerns about data privacy.
Over 48% of unreleased games have a Discord server, and I'm sure this is all fine and normal and I don't miss…
The article discusses the increasing prevalence of Discord servers for video games, with over 48% of unreleased titles having a server. It highlights concerns about game companies relying on Discord for their entire news cycle and the potential risks associated with data privacy and dependence on a single tech company.
Valve says loot boxes are just like "Pokemon, Magic the Gathering, and Labubu" as it pushes back against New York lawsuit, claims it's being pressured to "collect more personal data" for "additional age verification"
Valve is pushing back against a lawsuit from the New York Attorney General's office that claims its loot boxes constitute gambling. The company argues that these "mystery boxes" are akin to collectible card games and has expressed concerns about demands for increased personal data collection for age verification. Valve states it will comply with any future legislation but intends to fight the current lawsuit.
Valve posted a statement on the New York lootbox lawsuit
Valve has issued a statement addressing the New York Attorney General's lawsuit concerning lootboxes in Counter-Strike 2, Dota 2, and Team Fortress 2. The company argues that these mystery boxes do not violate gambling laws and compares them to tangible collectible items like baseball or Pokemon cards. Valve also expressed concerns about the Attorney General's demands for increased personal data collection for age verification and the proposed removal of item transferability.
Evening Legal Briefs
Elon Musk has failed in his attempt to block a California data disclosure law that he fears could harm his company xAI. Ars Technica reported on the legal proceedings, highlighting Musk's concerns about the potential ruinous effects of the law on his AI venture.