The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Security researcher Paul Moore revealed that Eufy cameras, which use AI for facial recognition, uploaded user images and biometric data to the cloud without consent, even when cloud storage was disabled. This unauthorized data transmission violated privacy rights and potentially breached GDPR, exposing users to significant privacy risks.[AI generated]
Why's our monitor labelling this an incident or hazard?
Eufy security cameras are AI systems as they process data and provide notifications based on that data. The unauthorized data transmission and the security vulnerability represent a malfunction or misuse of the AI system that could lead to violations of user privacy, a breach of rights, and harm to individuals' security. Although no exploitation has been reported yet, the privacy scandal and vulnerability indicate realized harm in terms of unauthorized data collection and a credible risk of further harm. The other news items are product updates and recommendations without harm. Hence, the event qualifies as an AI Incident due to the realized privacy violations and security issues involving AI systems.[AI generated]