{"id":1540,"date":"2025-01-26T13:49:03","date_gmt":"2025-01-26T20:49:03","guid":{"rendered":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/?p=1540"},"modified":"2025-01-26T13:49:18","modified_gmt":"2025-01-26T20:49:18","slug":"linkedins-privacy-controversy-a-wake-up-call-for-ai-governance","status":"publish","type":"post","link":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/2025\/01\/26\/linkedins-privacy-controversy-a-wake-up-call-for-ai-governance\/","title":{"rendered":"LinkedIn\u2019s Privacy Controversy: A Wake-Up Call for AI Governance"},"content":{"rendered":"\n<p>The world of Cybersecurity and Privacy is continuously growing especially with the introduction and massive growth of AI which causes a discrepancy between innovation and privacy and where exactly to draw the line. A lawsuit has been filed against LinkedIn in California with the allegations of sharing private messages of users under the Premium subscription with third parties to train their AI models. This is extremely critical and raises several questions regarding the transparency and ethical use of personal information in the development of AI models.&nbsp;<\/p>\n\n\n\n<p><strong>The Accusations<\/strong>&nbsp;<\/p>\n\n\n\n<p>It was alleged that LinkedIn introduced a privacy setting in August 2024 that automatically opted users without their consent into allowing their data (private messages included) to be used to train AI models. These changes were allegedly made quietly without informing users, which should be illegal. This raises a lot of eyebrows, especially for those of us who are consistent users of the platform. In addition to this, it was also claimed that a month later, LinkedIn updated its privacy policy to explicitly state that user information could be disclosed for AI training purposes, as well as altering their FAQs to imply that users could opt out of sharing their data. Opting out of data sharing does not affect any data that had been previously used which makes this retroactive. These allegations strongly suggest that LinkedIn was trying to cover its tracks to minimize scrutiny; however, this is a huge violation of contractual promises and privacy standards.&nbsp;<\/p>\n\n\n\n<p>The lawsuit was filed by Alessandro De La Torre, who is a LinkedIn Premium user, regarding the potential exposure of conversations considered private, which is justified due to the serious harm that could be caused by this exposure. The lawsuit seeks $1,000 per affected user of the platform under the U.S. Federal Stored Communications Act and also damages concerning breach of contract. The potential financial and reputational impact could be significant due to 25% of LinkedIn users being in the U.S. &nbsp;<\/p>\n\n\n\n<p>LinkedIn private messages and InMail messages have extremely sensitive data about job applications, job search efforts, etc., that could cause potential harm if seen by the individual\u2019s employer.&nbsp;In his case, for example, sensitive InMail messages about job-seeking efforts could compromise his professional relationships or damage his future relationships if used in the wrong way.&nbsp;<\/p>\n\n\n\n<p>Aside from analyzing the impacts this could have on the individual who filed the lawsuit, this goes beyond individual users because the data used to train these AI models become part of these systems permanently. Sometimes, the data might be deleted later but the insights that were gained remain as part of the system, making it a huge concern and further emphasizing the importance of user consent and transparency about data ownership in the development of AI.<\/p>\n\n\n\n<p><strong>LinkedIn\u2019s Response and the Bigger Picture<\/strong>&nbsp;<\/p>\n\n\n\n<p>The claims and allegations have been denied by LinkedIn and render the lawsuit false. Although LinkedIn is denying these claims, it has already raised and triggered more intense discussions and scrutiny around the ethical use of personal data for developing and maintaining AI. LinkedIn paused AI training with user data in the UK, European Economic Area, and Switzerland after various discussions with regulators, but this does not mean that it did not continue everywhere else. This also shows the inconsistency in data privacy safeguards across different regions. &nbsp;<\/p>\n\n\n\n<p>Other technological companies like OpenAI have also faced similar scrutiny for using data (publicly available) to train their generative AI models. LinkedIn\u2019s situation is even more critical because the data that is allegedly being used to train AI models are private data and messages that should not be for public consumption. The lack of global standards for AI is giving companies room to operate in legal gray areas which is dangerous in the long run.&nbsp;<\/p>\n\n\n\n<p><strong>Lessons for Cybersecurity and Privacy Professionals<\/strong>&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Transparency is very important, and companies must endeavor to communicate changes to privacy policies and settings. When changes are quietly introduced without informing users, this diminishes their trust and invites more scrutiny that will be detrimental to the company in the long term.\u00a0<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Users need real and enforceable control over how their data is used with clear options to opt-out before it is too late. A lot of companies out there are discrete about how exactly customer data is used, which should not be the case.\u00a0<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li>There should be consistent frameworks for AI and privacy to avoid regulations that are fragmented, compliance challenges or even gray areas that companies could exploit without any legal impact on them.\u00a0<\/li>\n<\/ul>\n\n\n\n<p><strong>Finding the Balance Between Innovation and Privacy<\/strong>&nbsp;<\/p>\n\n\n\n<p>AI has the ability to radically change industries around the world; however, this case clearly shows how easily innovation can affect and overshadow basic user rights. There is a glaring need for companies to establish balance by enhancing their privacy practices and being more transparent about how they intend to use the data of their users. Without these users, they wouldn\u2019t have a platform or an audience. &nbsp;<\/p>\n\n\n\n<p>Regulators and governments also need to pull their weight, especially with the new rollback of AI safety initiatives in the U.S. There is an urgent need for stringent procedures in place to protect the privacy of individuals while also allowing the innovation of AI to thrive peacefully. If these procedures are not enforced in a stricter manner, many companies will continue to operate in gray areas, causing even more problems. \u00a0<\/p>\n\n\n\n<p><strong>References<\/strong>&nbsp;<\/p>\n\n\n\n<p>Silva, Jo\u00e3o da. \u201cLinkedIn Accused of Using Private Messages to Train AI.\u201d <em>BBC News<\/em>, BBC, 23 Jan. 2025, <a href=\"https:\/\/cac-word-edit.officeapps.live.com\/we\/www.bbc.com\/news\/articles\/cdxevpzy3yko\" target=\"_blank\" rel=\"noreferrer noopener\">www.bbc.com\/news\/articles\/cdxevpzy3yko<\/a>.&nbsp;<\/p>\n\n\n\n<p>Asokan, Akshaya, and Ron Ross. \u201cLawsuit Claims Linkedin Used Private Messages to Train AI.\u201d <em>Government Information Security<\/em>, 23 Jan. 2025, <a href=\"https:\/\/cac-word-edit.officeapps.live.com\/we\/www.govinfosecurity.com\/lawsuit-claims-linkedin-used-private-messages-to-train-ai-a-27366\" target=\"_blank\" rel=\"noreferrer noopener\">www.govinfosecurity.com\/lawsuit-claims-linkedin-used-private-messages-to-train-ai-a-27366<\/a>.&nbsp;<\/p>\n\n\n\n<p>Landi, Martyn. \u201cLinkedIn Accused of Sharing Users\u2019 Messages with Firms to Train AI.\u201d <em>The Independent<\/em>, The Independent, 23 Jan. 2025, <a href=\"https:\/\/www.the-independent.com\/tech\/linkedin-ai-messages-lawsuit-data-b2684918.html\" target=\"_blank\" rel=\"noreferrer noopener\">www.the-independent.com\/tech\/linkedin-ai-messages-lawsuit-data-b2684918.html<\/a>.&nbsp;<\/p>\n\n\n\n<p>Schroeder, Scott. &#8220;White and Blue Labeled Box.&#8221; <em>Unsplash<\/em>, <a href=\"https:\/\/unsplash.com\/photos\/white-and-blue-labeled-box-JLj_NbvlDDo\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/unsplash.com\/photos\/white-and-blue-labeled-box-JLj_NbvlDDo<\/a>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The world of Cybersecurity and Privacy is continuously growing especially with the introduction and massive growth of AI which causes a discrepancy between innovation and privacy and where exactly to draw the line. A lawsuit has been filed against LinkedIn in California with the allegations of sharing private messages of users under the Premium subscription &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/2025\/01\/26\/linkedins-privacy-controversy-a-wake-up-call-for-ai-governance\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;LinkedIn\u2019s Privacy Controversy: A Wake-Up Call for AI Governance&#8221;<\/span><\/a><\/p>\n","protected":false},"author":682,"featured_media":1541,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1540","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","entry"],"featured_image_src":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2025\/01\/souvik-banerjee-JLj_NbvlDDo-unsplash-600x400.jpg","featured_image_src_square":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2025\/01\/souvik-banerjee-JLj_NbvlDDo-unsplash-600x600.jpg","author_info":{"display_name":"Faizah Kolapo","author_link":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/author\/faizah-kolapo\/"},"_links":{"self":[{"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/posts\/1540","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/users\/682"}],"replies":[{"embeddable":true,"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/comments?post=1540"}],"version-history":[{"count":1,"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/posts\/1540\/revisions"}],"predecessor-version":[{"id":1542,"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/posts\/1540\/revisions\/1542"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/media\/1541"}],"wp:attachment":[{"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/media?parent=1540"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/categories?post=1540"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/tags?post=1540"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}