Alexander Hanff

Amazon Ring's Familiar Faces is a textbook example for ECD

Amazon's Ring Familiar Faces biometrically scans every person who approaches a Ring doorbell, performs the match in Amazon's cloud rather than on the device that could have done it locally, and stores faceprints of non-consenting strangers for up to thirty days. The architectural choice produces two independent breaches: a GDPR exposure the household-activity…

https://www.thatprivacyguy.com/blog/amazon-ring-familiar-faces-is-textbook-example-for-ecd

#ai #climate #consent #environment #esg #law #gdpr

Google Chrome silently installs a 4 GB AI model on your device without consent. At a billion-device scale the climate costs are insane.

Google Chrome is downloading a 4 GB Gemini Nano model onto users' machines without consent, with no opt-in, no opt-out short of enterprise tooling, and an automatic re-download every time the user deletes it. The pattern is…

https://www.thatprivacyguy.com/blog/chrome-silent-nano-install

#ai #privacy #eprivacy #compliance #gdpr #google #chrome #gemini #esg #environment #sustainability #climate #law

Strike III for EU-US data transfers

The US Supreme Court has just ruled the FTC isn't independent of the President - and our entire data deal with America was built on the promise that it was.

https://www.thatprivacyguy.com/blog/strike-iii-for-eu-us-data-transfers

#gdpr #adequacy #ftc #schrems #law #surveillance #dataprivacyframework #dpf #scotus #adequacy #compliance

Anthropic secretly installs spyware when you install Claude Desktop

Anthropic's Claude Desktop silently installs a Native Messaging bridge into seven Chromium browsers, including browsers Anthropic's own documentation says it does not support, and browsers the user has not even installed.

https://www.thatprivacyguy.com/blog/anthropic-spyware

#ai #privacy #eprivacy #compliance #infosec #gdpr #law #cyber #security #anthropic #claude

The MEP investigating spyware was keeping his whole life on the phone that got hacked

Pegasus infected the phone of an MEP who sat on the committee investigating it - a real assault on democracy. It also came out that he kept fifteen years of everything on that one phone and missed three warnings from Apple - and that's a failure we have to talk about too.

https://www.thatprivacyguy.com/blog/mep-spyware-committee-phone-security

#surveillance #spyware #pegasus #cybersecurity #eu #pega #edps #privacy

The United Nations runs Google's ad-tech on its own website, without consent, while telling the rest of us to account for AI's footprint

The UN demands AI accountability while running Google ad-tech, analytics and tracking on its own website - with no consent and a measurable, avoidable carbon cost.

https://www.thatprivacyguy.com/blog/un-tracking-without-consent

#privacy #gdpr #eprivacy #environment #tracking #un #esg #HumanRights #hypocrisy #adtech #ai

Google quietly removes the on-device AI privacy assurance from Chrome's Settings UI

Google has quietly removed the privacy assurance from Chrome's on-device AI Settings UI. The sentence promising that the model runs locally without sending data to Google's servers has been deleted, and the toggle moved out of the System block to reduce the chance the change is noticed. There are three plausible reasons for tha…

https://www.thatprivacyguy.com/blog/google-quietly-removes-on-device-ai-privacy-claim

#ai #chrome #consent #compliance #eprivacy #gdpr #google

I told them forced consent was unlawful. Five years later it cost Elkjop €1.8 million

Datatilsynet just fined Elkjop NOK 20 million (€1.8m) for the forced consent in its loyalty club — five years after I told their DPO it was unlawful.

https://www.thatprivacyguy.com/blog/elkjop-forced-consent-fine

#gdpr #eprivacy #consent #enforcement #loyaltyclubs #SurveillanceCapitalism #spam #adtech #compliance