Peru Fines Google for Failing to Remove Personal Data from Search Results

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

Peru's data protection authority fined Google 430,000 soles for not complying with orders to remove or block personal data from search results. Google's AI-driven search system failed to desindex or restrict access to sensitive information, violating individuals' privacy rights and data protection laws in 14 documented cases.[AI generated]

Why's our monitor labelling this an incident or hazard?

Google Search uses AI systems for indexing, ranking, and autocomplete predictive text. The refusal or failure to remove personal data upon regulatory orders directly results in harm to individuals' privacy rights and breaches data protection laws. This constitutes a violation of human rights and legal obligations. Since the harm has already occurred and sanctions have been imposed, this qualifies as an AI Incident rather than a hazard or complementary information.[AI generated]
AI principles
Privacy & data governanceRespect of human rightsAccountabilityTransparency & explainability

Industries
Media, social platforms, and marketingIT infrastructure and hosting

Affected stakeholders
General public

Harm types
Human or fundamental rightsReputational

Severity
AI incident

Business function:
Monitoring and quality controlCompliance and justice

AI system task:
Organisation/recommenders


Articles about this incident or hazard

Thumbnail Image

Perú multa a Google con S/430 mil por no eliminar datos personales de resultados de búsqueda

2023-08-16
El Comercio Perú
Why's our monitor labelling this an incident or hazard?
Google Search uses AI systems for indexing, ranking, and autocomplete predictive text. The refusal or failure to remove personal data upon regulatory orders directly results in harm to individuals' privacy rights and breaches data protection laws. This constitutes a violation of human rights and legal obligations. Since the harm has already occurred and sanctions have been imposed, this qualifies as an AI Incident rather than a hazard or complementary information.
Thumbnail Image

Google recibe una multa de 430 mil soles en Perú por no restringir datos personales en sus búsquedas | RPP Noticias

2023-08-16
RPP noticias
Why's our monitor labelling this an incident or hazard?
Google's search engine uses AI systems to index and rank information, including personal data. The failure to remove or restrict access to personal data upon official request led to harm to individuals' privacy and reputation, which is a violation of data protection laws and fundamental rights. The AI system's role in indexing and suggesting information is pivotal to the harm caused. The event describes realized harm and legal consequences, fitting the definition of an AI Incident under violations of rights.
Thumbnail Image

Perú multa a Google: deberá pagar S/430.000 por no eliminar datos personales en sus búsquedas

2023-08-15
LaRepublica.pe
Why's our monitor labelling this an incident or hazard?
Google Search is an AI system that uses algorithms to index and rank web content. The refusal or failure to desindex personal data upon legal request results in a breach of data protection rights and harms individuals' privacy and reputation. The event describes realized harm (violation of rights) caused by the AI system's use and its failure to comply with corrective measures. Hence, it meets the criteria for an AI Incident due to violations of human rights and legal obligations related to personal data protection.
Thumbnail Image

¿Por qué el Estado peruano sancionó a Google con casi medio millón de soles?

2023-08-17
LaRepublica.pe
Why's our monitor labelling this an incident or hazard?
An AI system is involved as Google Search uses AI-based algorithms to index and retrieve information. The sanction arises from Google's failure to remove personal data upon official orders, leading to violations of personal rights protected by law. This constitutes a violation of human rights and legal obligations related to data protection, thus qualifying as an AI Incident due to the direct harm caused by the AI system's use and non-compliance.
Thumbnail Image

¿Por qué el Gobierno de Perú multó a Google?

2023-08-14
Crónica Viva
Why's our monitor labelling this an incident or hazard?
Google Search uses AI-based algorithms for indexing and autocomplete functions. The failure to remove or block personal data as ordered by the Peruvian authority has directly led to violations of individuals' rights to privacy and data protection, constituting harm under the framework. The autocomplete algorithm suggesting inappropriate associations also implicates AI misuse or malfunction causing reputational harm. Therefore, this qualifies as an AI Incident due to realized harm from AI system use and malfunction violating legal protections.