{"id":12160,"date":"2022-09-13T13:00:20","date_gmt":"2022-09-13T13:00:20","guid":{"rendered":"http:\/\/TheNextWeb=1390603"},"modified":"2022-09-13T13:00:20","modified_gmt":"2022-09-13T13:00:20","slug":"what-does-europes-approach-to-data-privacy-mean-for-gpt-and-dall-e","status":"publish","type":"post","link":"https:\/\/www.londonchiropracter.com\/?p=12160","title":{"rendered":"What does Europe\u2019s approach to data privacy mean for GPT and DALL-E?"},"content":{"rendered":"\n

The global AI<\/a> explosion has supercharged the need for a common sense, human-centered methodology for dealing with data privacy and ownership. Leading the way is Europe\u2019s General Data Protection Regulation (GDPR), but there\u2019s more than just personally identifiable information (PII) at stake in the modern market.<\/span><\/p>\n

What about the data we generate as content and art? It\u2019s certainly not legal to copy someone else\u2019s work and then present it as your own. But there are AI systems that attempt to <\/span>scrape<\/span><\/i> as much human-generated content from the web as possible in order to generate content that\u2019s similar. <\/span><\/p>\n

Can GDPR or any other EU-centered policies protect this kind of content? As it turns out, like most things in the machine learning world, it depends on the data. <\/span><\/p>\n

Privacy vs ownership<\/span><\/h2>\n
\n
\n
<\/div>\n

\n

Greetings, humanoids<\/h2>\n

Subscribe to our newsletter now for a weekly recap of our favorite AI stories in your inbox.<\/p>\n<\/div>\n<\/div>\n<\/div>\n

GDPR\u2019s primary purpose is to protect European citizens from harmful actions and consequences related to the misuse, abuse, or exploitation of their private information. It\u2019s not much use to citizens (or organizations) when it comes to protecting intellectual property (IP). <\/span><\/p>\n

Unfortunately, the policies and regulations put in place to protect IP are, to the best of our knowledge, not equipped to cover data scraping and anonymization. That makes it difficult to understand exactly where the regulations apply when it comes to scraping the web for content. <\/span><\/p>\n

These techniques, and the data they obtain, are used to create massive databases for use in training large AI models such as OpenAI\u2019s GPT-3 and DALL-E 2 systems.<\/span><\/p>\n

The only way to teach an AI to imitate humans is to expose it to human-generated data. And the more data you shove in an AI system, the more robust its output tends to be. <\/span><\/p>\n

It works like this: imagine you draw a picture of a flower and post it to an online forum for artists. Using scraping techniques, a tech outfit sucks up your image along with billions of others so it can create a massive dataset of artwork. The next time someone asks the AI to generate an image of a \u201cflower,\u201d there\u2019s a greater-than-zero possibility that your work will feature in the AI\u2019s interpretation of the prompt. <\/span><\/p>\n

As to whether such use would be ethical remains an open question. <\/span><\/p>\n

Public data versus PII<\/span><\/h2>\n

While the GDPR\u2019s regulatory oversight could be described as far-reaching when it comes to protecting private information and giving Europeans the<\/span> right to erasure<\/span><\/i><\/a>, it seemingly does very little to protect content from scraping. However, that doesn\u2019t mean GDPR and other EU regulations are entirely feckless in this regard. <\/span><\/p>\n

Individuals and organizations have to follow very specific rules for scraping PII, lest they fall afoul of the law \u2014 something that can become quite costly. <\/span><\/p>\n

As an example, it\u2019s becoming nigh impossible for Clearview AI, a company that builds facial recognition databases for government use by <\/span>scraping<\/span><\/i> social media data, to conduct business in Europe. EU watchdogs from at least seven nations have either issued hefty fines already or recommended fines over the company\u2019s refusal to comply with GDPR and similar regulations.<\/span><\/p>\n

On the complete other side of the spectrum, companies such as Google, OpenAI, and Meta employ similar <\/span>data scraping <\/span><\/i>practices either directly or via the purchase or use of scraped datasets for many of their AI models without any repercussion. And, while big tech\u2019s faced its fair share of fines in Europe, very few of the infractions have involved data scraping. <\/span><\/p>\n

Why not ban scraping? <\/span><\/h2>\n

Scraping, on the surface, might seem like a practice with too much potential for misuse not to ban outright. However, for many organizations that rely on scraping, the data being obtained isn\u2019t necessarily \u201ccontent\u201d or \u201cPII,\u201d but information that can serve the public. <\/span><\/p>\n

We reached out to the UK\u2019s agency for handling data privacy, the<\/span> Information Commissioner\u2019s Office<\/span><\/a> (ICO), to find out how they regulated scraping techniques and internet-scale datasets and to understand why it was so important not to over-regulate.<\/span><\/p>\n

A spokesperson for the ICO told TNW:<\/span><\/p>\n

The use of publicly available information can bring many benefits, from research to developing new products, services and innovations \u2014 including in the AI space. However, where this information is personal data, it\u2019s important to understand that data protection law applies. This is the case whether the techniques used to collect the data involve scraping or anything else.<\/span><\/p>\n

In other words, it\u2019s more about the kind of data being used than how it\u2019s gathered. <\/span><\/p>\n

Whether you copy paste images from Facebook profiles or use machine learning to scrape the web for labeled images, you\u2019re likely to run afoul of GDPR and other European privacy regulations if you build a facial recognition engine without consent from the people whose faces are in its database.<\/span><\/p>\n

But it\u2019s generally acceptable to scrape the internet for massive amounts of data as long as you either<\/span> anonymize it<\/span><\/a> or ensure that there is no PII in the dataset.<\/span><\/p>\n

Further gray areas<\/span><\/h2>\n

However, even within the allowed use cases, there still exist some gray areas that do concern private information. <\/span><\/p>\n

GPT-2 and GPT-3, for example, are<\/span> known to occasionally output PII<\/span><\/a> in the form of addresses, phone numbers, and other information that\u2019s apparently baked into its corpus via large scale training datasets.<\/span><\/p>\n

Here, where it\u2019s evident that the company behind GPT-2 and GPT-3 are taking steps to mitigate this, GDPR and similar regulations are doing their job. <\/span><\/p>\n

Simply put, we can either choose not to train large AI models or allow the companies training them the opportunity to explore edge cases and attempt to mitigate concerns.<\/span><\/p>\n

What might be needed is a GDUR, a General Data Use Regulation, something that could give clear guidelines into how human-generated content can legally be used in large datasets.<\/span><\/p>\n

At a minimum, it seems like it\u2019s worth having a conversation about whether European citizens should have as much right to have the content they create removed from datasets as their selfies and profile pics. <\/span><\/p>\n

For now, in the UK and throughout the rest of Europe, it seems the right to erasure only extends to our PII. Anything we put online is likely to end up in some AI\u2019s training dataset.  <\/span><\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

The global AI explosion has supercharged the need for a common sense, human-centered methodology for dealing with data privacy and ownership. Leading the way is Europe\u2019s General Data Protection Regulation (GDPR), but…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/posts\/12160"}],"collection":[{"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12160"}],"version-history":[{"count":0,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/posts\/12160\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12160"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=12160"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=12160"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}