Google’s AI-Driven Fingerprinting Raises Privacy Alarm

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

Google has rolled out an AI-driven “fingerprinting” technique that uniquely identifies users by aggregating device and browser parameters, replacing cookies to enable persistent, virtually unchallengeable tracking. Privacy advocates and regulators warn this probabilistic profiling breaches user privacy rights and undermines online anonymity, with few options to opt out.[AI generated]

Why's our monitor labelling this an incident or hazard?

Fingerprinting is a technique that involves sophisticated data processing to uniquely identify and track users, which fits the definition of an AI system's use in data-driven profiling and tracking. The event involves the use of this AI-enabled tracking method leading to violations of user privacy and potentially breaches of data protection rights, which are human rights under applicable law. Since the tracking is actively occurring and has led to concerns about loss of user control and privacy violations, this constitutes an AI Incident under the framework, specifically a violation of human rights and privacy protections. The article reports on the realized use and its direct impact, not just potential future harm or complementary information.[AI generated]
AI principles
Privacy & data governanceRespect of human rightsTransparency & explainabilityAccountabilityDemocracy & human autonomy

Industries
Media, social platforms, and marketing

Affected stakeholders
Consumers

Harm types
Human or fundamental rightsPublic interest

Severity
AI incident

Business function:
Marketing and advertisement

AI system task:
Organisation/recommendersOther


Articles about this incident or hazard

Thumbnail Image

"Fingerprinting": pourquoi la nouvelle technique de Google pour pister les utilisateurs inquiète

2025-02-17
BFMTV
Why's our monitor labelling this an incident or hazard?
Fingerprinting is a technique that involves sophisticated data processing to uniquely identify and track users, which fits the definition of an AI system's use in data-driven profiling and tracking. The event involves the use of this AI-enabled tracking method leading to violations of user privacy and potentially breaches of data protection rights, which are human rights under applicable law. Since the tracking is actively occurring and has led to concerns about loss of user control and privacy violations, this constitutes an AI Incident under the framework, specifically a violation of human rights and privacy protections. The article reports on the realized use and its direct impact, not just potential future harm or complementary information.
Thumbnail Image

Google vous traque désormais partout... et il est presque impossible...

2025-02-18
Futura
Why's our monitor labelling this an incident or hazard?
Fingerprinting is an AI-related technique involving complex data processing to uniquely identify users, which is a form of AI system use. The article highlights that Google's deployment of this method leads to privacy violations and lack of user control, constituting a breach of fundamental rights. Since the harm (violation of privacy rights) is occurring due to the use of this AI-enabled tracking system, this qualifies as an AI Incident under the framework's definition of violations of human rights or breach of obligations intended to protect fundamental rights.
Thumbnail Image

Le pernicieux "fingerprinting" remplacera-t-il le cookie sur internet?

2025-02-19
Site-LeVif-FR
Why's our monitor labelling this an incident or hazard?
The article explicitly describes fingerprinting as a technique involving AI or algorithmic methods to identify users persistently online, which fits the definition of an AI system. However, it does not document any realized harm such as privacy violations or data breaches directly caused by fingerprinting, nor does it describe a specific event where harm was narrowly avoided. Instead, it discusses the potential risks, regulatory challenges, and societal debates around the technology, including Google's policy changes and privacy advocates' concerns. This aligns with the definition of Complementary Information, as it provides context, analysis, and updates on AI-related privacy issues without reporting a new incident or hazard.