{"id":65485,"date":"2024-07-17T06:00:00","date_gmt":"2024-07-17T10:00:00","guid":{"rendered":"https:\/\/statescoop.com\/?p=65485"},"modified":"2024-07-18T10:37:04","modified_gmt":"2024-07-18T14:37:04","slug":"generative-ai-privacy-principles-obsolete-oecd","status":"publish","type":"post","link":"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/","title":{"rendered":"Has generative AI made our best privacy principles obsolete?"},"content":{"rendered":"\n

The Organization for Economic Cooperation and Development\u2019s privacy principles<\/a> were, in many ways, a masterpiece. Written in 1980, they set out clear and specific guidelines that gave rise to the first comprehensive privacy laws. Core concepts such as accountability, transparency, and data security all spring from this source: if these ideas seem obvious today, it\u2019s a reflection of how deeply ingrained the OECD\u2019s guidelines are in the way that both consumers and businesses think about data privacy.<\/p>\n\n\n\n

Look at the OECD\u2019s principles on AI use<\/a>, which were updated last year, and you\u2019ll see a very different story playing out. Compared with the precise language and clear principles in the 1980 privacy guidelines, the AI principles are almost comically hesitant. They offer only the broadest of goals \u2014 encouraging the creation of \u201ctrustworthy AI\u201d that doesn\u2019t actively break the law, for instance \u2014 with little or no guidance on how to enact them, or even judge whether they\u2019ve been achieved.<\/p>\n\n\n\n

Its recommendations are hedged with the repeated proviso that they only apply when \u201cappropriate to the context and consistent with the state of the art\u201d \u2014 a shrugging acknowledgement that AI is so new, and evolving so fast, that any specific principles would be outdated before the ink was dry.<\/p>\n\n\n\n

The contrast between these two sets of guidelines couldn\u2019t be clearer. When the privacy principles were adopted, the OECD could essentially ignore technical challenges and simply articulate how data should or shouldn\u2019t be treated. In the AI era, though, tech is evolving so fast that any<\/em> concrete guidelines risk becoming immediately obsolete. Like other regulatory groups, the OECD decided its only option was to articulate broad values, rather than give clear guidance on how they should be implemented.<\/p>\n\n\n\n

Like it or not, we live in the AI era, and that\u2019s complicating data privacy just as much as it\u2019s complicating efforts to regulate AI itself. As we think about the future of privacy in an AI world, it\u2019s important to ask: are the OECD\u2019s privacy principles still relevant? Or are they becoming obsolete \u2014 a regulatory weapon from a more civilized age<\/a>, before AI made a mockery of attempts to pass clear and prescriptive recommendations?<\/p>\n\n\n\n

The OECD\u2019s privacy principles are grounded in the idea that every single bit of personal data is unique, important and deserving of individual protection. From my bank information to my facial biometrics, the idea goes, my information is mine<\/em> and needs to be handled with the utmost caution and respect.<\/p>\n\n\n\n

For AI innovators, however, the world looks very different. Instead of worrying about individual droplets of data, AI concerns itself with the swirling tides and currents of the entire ocean. My data may not matter much at all, on an individual level: What matters is data in aggregate and the patterns and signals that can be coaxed out of vast datasets.<\/p>\n\n\n\n

That simple distinction lays waste to the OECD\u2019s privacy principles.<\/p>\n\n\n\n

The collection limitation principle <\/strong>calls for restraint in the collection of personal data, and for data to only be collected with the subject\u2019s knowledge and consent, while the data quality principle says we should only collect the data needed to achieve our goals. AI depends, however, on indiscriminately ingesting vast amounts of data, including colossal quantities of public data scraped without notifying anyone.<\/p>\n\n\n\n

The purpose specification principle says we should disclose our goals up front, and the use limitation principle says personal data shouldn\u2019t be used for purposes other than those specified during collection. But AI depends on collecting data first<\/em> and then figuring out what\u2019s possible to do with it \u2014 so unless we\u2019re willing to accept \u201cdoing AI stuff\u201d as a legitimate purpose, both these principles go out the window.<\/p>\n\n\n\n

The security safeguards principle says personal data should be protected against loss or unauthorized access, and the individual participation principle says individuals have the right to know what\u2019s being done with their data and to have their data amended or deleted. But AI models embed data in their own algorithms in ways that can\u2019t simply be disclosed or deleted. <\/p>\n\n\n\n

The openness principle says developers should work openly and transparently, and the accountability principle says a data controller should be accountable for enacting all the foregoing principles. In an era of black-box algorithms, where not even the developer really knows what\u2019s going on under the hood, both these principles are virtually impossible to implement in any meaningful way.<\/p>\n\n\n\n

Regulating AI using the OECD\u2019s existing privacy principles will be about as effective as using traffic laws to halt a supernova. Case in point: The French Data Protection Authority got tied up in knots<\/a> recently by trying to argue that data minimization doesn\u2019t preclude training AI models on big datasets \u2014 but does <\/em>still require developers to avoid feeding \u201cunnecessary\u201d personal data into AI systems. That brings us straight back to the core question of how, exactly, AI developers can know in advance whether data was necessary or not.<\/p>\n\n\n\n

Because the privacy industry is on a collision course with a technological and economic juggernaut, clinging too hard to the OECD\u2019s principles could wind up doing more harm than good. If privacy advocates commit to a privacy framework that\u2019s fundamentally incompatible with the AI revolution, the entire framework could wind up getting left behind. If we force people to choose between privacy and AI, we could wind up with AI and no privacy.<\/p>\n\n\n\n

That would be a disaster, because the the values underpinning the OECD\u2019s principles remain incredibly important. Precisely because AI radically complicates everything, and makes the OECD\u2019s privacy principles virtually impossible to enforce as written, the underlying ideals of transparency and dignity and fairness and agency are needed more than ever. (Data privacy is dead \u2014 long live data privacy!)<\/p>\n\n\n\n

I don\u2019t have a satisfying solution to offer \u2014 like you, I\u2019m just one more drop in the ocean. But I believe this is the conversation our industry needs to be having if we want to avoid sacrificing data privacy on the altar of AI innovation. Pretending that old approaches to data privacy are enough will backfire fast: If we want privacy to endure in the AI era, we need to get serious and start rethinking the foundational ideas on which modern privacy infrastructure is built. <\/p>\n\n\n\n

This is a submission from a contributor and does not necessarily reflect the opinions of Scoop News Group.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

The world\u2019s foundational privacy guidelines weren\u2019t written for the generative AI era.<\/p>\n","protected":false},"author":205,"featured_media":65621,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"disable_grayscale_images":true,"grayscale_contrast":0,"sponsored_content":false,"display_author_bio":true,"story_type":"","footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[201],"tags":[251,2846,5272,24150,24928,24929,24930],"people":[],"special-report":[24959],"authors":[24891],"class_list":["post-65485","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-commentary","tag-privacy","tag-governance","tag-artificial-intelligence-ai","tag-generative-ai","tag-privacy-principles","tag-the-ethical-tech-project","tag-organization-for-economic-cooperation-and-development","special-report-government-ai-2024","author-jonathan-joseph"],"yoast_head":"\nHas generative AI made our best privacy principles obsolete? | StateScoop<\/title>\n<meta name=\"description\" content=\"The world\u2019s foundational privacy guidelines weren\u2019t written for the generative AI era.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Has generative AI made our best privacy principles obsolete? | StateScoop\" \/>\n<meta property=\"og:description\" content=\"The world\u2019s foundational privacy guidelines weren\u2019t written for the generative AI era.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/\" \/>\n<meta property=\"og:site_name\" content=\"StateScoop\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/StateScoop\/\" \/>\n<meta property=\"article:published_time\" content=\"2024-07-17T10:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-07-18T14:37:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2024\/07\/Ethical-Tech-Project.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1300\" \/>\n\t<meta property=\"og:image:height\" content=\"731\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Colin Wood\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@State_Scoop\" \/>\n<meta name=\"twitter:site\" content=\"@State_Scoop\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/\",\"url\":\"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/\",\"name\":\"Has generative AI made our best privacy principles obsolete? | StateScoop\",\"isPartOf\":{\"@id\":\"https:\/\/statescoop.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2024\/07\/Ethical-Tech-Project.jpg\",\"datePublished\":\"2024-07-17T10:00:00+00:00\",\"dateModified\":\"2024-07-18T14:37:04+00:00\",\"description\":\"The world\u2019s foundational privacy guidelines weren\u2019t written for the generative AI era.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/#primaryimage\",\"url\":\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2024\/07\/Ethical-Tech-Project.jpg\",\"contentUrl\":\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2024\/07\/Ethical-Tech-Project.jpg\",\"width\":1300,\"height\":731,\"caption\":\"(Giannina Vera \/ Scoop News Group)\"},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/statescoop.com\/#website\",\"url\":\"https:\/\/statescoop.com\/\",\"name\":\"StateScoop\",\"description\":\"Latest news and events in state and local government technology\",\"publisher\":{\"@id\":\"https:\/\/statescoop.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/statescoop.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/statescoop.com\/#organization\",\"name\":\"StateScoop\",\"url\":\"https:\/\/statescoop.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/statescoop.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/StateScoop-Black.png\",\"contentUrl\":\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/StateScoop-Black.png\",\"width\":1470,\"height\":186,\"caption\":\"StateScoop\"},\"image\":{\"@id\":\"https:\/\/statescoop.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/StateScoop\/\",\"https:\/\/x.com\/State_Scoop\",\"https:\/\/www.linkedin.com\/company\/statescoop\/\",\"https:\/\/www.youtube.com\/@StateScoop\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Has generative AI made our best privacy principles obsolete? | StateScoop","description":"The world\u2019s foundational privacy guidelines weren\u2019t written for the generative AI era.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/","og_locale":"en_US","og_type":"article","og_title":"Has generative AI made our best privacy principles obsolete? | StateScoop","og_description":"The world\u2019s foundational privacy guidelines weren\u2019t written for the generative AI era.","og_url":"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/","og_site_name":"StateScoop","article_publisher":"https:\/\/www.facebook.com\/StateScoop\/","article_published_time":"2024-07-17T10:00:00+00:00","article_modified_time":"2024-07-18T14:37:04+00:00","og_image":[{"width":1300,"height":731,"url":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2024\/07\/Ethical-Tech-Project.jpg","type":"image\/jpeg"}],"author":"Colin Wood","twitter_card":"summary_large_image","twitter_creator":"@State_Scoop","twitter_site":"@State_Scoop","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/","url":"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/","name":"Has generative AI made our best privacy principles obsolete? | StateScoop","isPartOf":{"@id":"https:\/\/statescoop.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/#primaryimage"},"image":{"@id":"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/#primaryimage"},"thumbnailUrl":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2024\/07\/Ethical-Tech-Project.jpg","datePublished":"2024-07-17T10:00:00+00:00","dateModified":"2024-07-18T14:37:04+00:00","description":"The world\u2019s foundational privacy guidelines weren\u2019t written for the generative AI era.","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/#primaryimage","url":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2024\/07\/Ethical-Tech-Project.jpg","contentUrl":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2024\/07\/Ethical-Tech-Project.jpg","width":1300,"height":731,"caption":"(Giannina Vera \/ Scoop News Group)"},{"@type":"WebSite","@id":"https:\/\/statescoop.com\/#website","url":"https:\/\/statescoop.com\/","name":"StateScoop","description":"Latest news and events in state and local government technology","publisher":{"@id":"https:\/\/statescoop.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/statescoop.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/statescoop.com\/#organization","name":"StateScoop","url":"https:\/\/statescoop.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/statescoop.com\/#\/schema\/logo\/image\/","url":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/StateScoop-Black.png","contentUrl":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/StateScoop-Black.png","width":1470,"height":186,"caption":"StateScoop"},"image":{"@id":"https:\/\/statescoop.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/StateScoop\/","https:\/\/x.com\/State_Scoop","https:\/\/www.linkedin.com\/company\/statescoop\/","https:\/\/www.youtube.com\/@StateScoop"]}]}},"parsely":{"version":"1.1.0","canonical_url":"https:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/","smart_links":{"inbound":0,"outbound":0},"traffic_boost_suggestions_count":0,"meta":{"@context":"https:\/\/schema.org","@type":"NewsArticle","headline":"Has generative AI made our best privacy principles obsolete?","url":"http:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/","mainEntityOfPage":{"@type":"WebPage","@id":"http:\/\/statescoop.com\/generative-ai-privacy-principles-obsolete-oecd\/"},"thumbnailUrl":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2024\/07\/Ethical-Tech-Project.jpg?w=150&h=150&crop=1","image":{"@type":"ImageObject","url":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2024\/07\/Ethical-Tech-Project.jpg"},"articleSection":"Commentary","author":[{"@type":"Person","name":"Jonathan Joseph","url":"https:\/\/statescoop.com\/author\/jonathan-joseph\/"}],"creator":["Jonathan Joseph"],"publisher":{"@type":"Organization","name":"StateScoop","logo":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/cropped-ss_favicon.png"},"keywords":["artificial intelligence (ai)","generative ai","governance","organization for economic cooperation and development","privacy","privacy principles","the ethical tech project"],"dateCreated":"2024-07-17T10:00:00Z","datePublished":"2024-07-17T10:00:00Z","dateModified":"2024-07-18T14:37:04Z"},"rendered":"<script type=\"application\/ld+json\" class=\"wp-parsely-metadata\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"NewsArticle\",\"headline\":\"Has generative AI made our best privacy principles obsolete?\",\"url\":\"http:\\\/\\\/statescoop.com\\\/generative-ai-privacy-principles-obsolete-oecd\\\/\",\"mainEntityOfPage\":{\"@type\":\"WebPage\",\"@id\":\"http:\\\/\\\/statescoop.com\\\/generative-ai-privacy-principles-obsolete-oecd\\\/\"},\"thumbnailUrl\":\"https:\\\/\\\/statescoop.com\\\/wp-content\\\/uploads\\\/sites\\\/6\\\/2024\\\/07\\\/Ethical-Tech-Project.jpg?w=150&h=150&crop=1\",\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/statescoop.com\\\/wp-content\\\/uploads\\\/sites\\\/6\\\/2024\\\/07\\\/Ethical-Tech-Project.jpg\"},\"articleSection\":\"Commentary\",\"author\":[{\"@type\":\"Person\",\"name\":\"Jonathan Joseph\",\"url\":\"https:\\\/\\\/statescoop.com\\\/author\\\/jonathan-joseph\\\/\"}],\"creator\":[\"Jonathan Joseph\"],\"publisher\":{\"@type\":\"Organization\",\"name\":\"StateScoop\",\"logo\":\"https:\\\/\\\/statescoop.com\\\/wp-content\\\/uploads\\\/sites\\\/6\\\/2023\\\/01\\\/cropped-ss_favicon.png\"},\"keywords\":[\"artificial intelligence (ai)\",\"generative ai\",\"governance\",\"organization for economic cooperation and development\",\"privacy\",\"privacy principles\",\"the ethical tech project\"],\"dateCreated\":\"2024-07-17T10:00:00Z\",\"datePublished\":\"2024-07-17T10:00:00Z\",\"dateModified\":\"2024-07-18T14:37:04Z\"}<\/script>","tracker_url":"https:\/\/cdn.parsely.com\/keys\/statescoop.com\/p.js"},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2024\/07\/Ethical-Tech-Project.jpg","distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"StateScoop","distributor_original_site_url":"https:\/\/statescoop.com","push-errors":false,"_links":{"self":[{"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/posts\/65485","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/users\/205"}],"replies":[{"embeddable":true,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/comments?post=65485"}],"version-history":[{"count":4,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/posts\/65485\/revisions"}],"predecessor-version":[{"id":65654,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/posts\/65485\/revisions\/65654"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/media\/65621"}],"wp:attachment":[{"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/media?parent=65485"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/categories?post=65485"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/tags?post=65485"},{"taxonomy":"people","embeddable":true,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/people?post=65485"},{"taxonomy":"special-report","embeddable":true,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/special-report?post=65485"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/statescoop.com\/wp-json\/wp\/v2\/authors?post=65485"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}