ByteDance AI Coding Tool Trae IDE Secretly Collects User Data Despite Opt-Outs

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

ByteDance's AI-powered coding tool, Trae IDE, was found to collect extensive user data—including system info, project details, and behavioral metrics—even after users disabled telemetry. The unauthorized data transmission to ByteDance servers constitutes a significant privacy violation and breach of user consent, raising concerns over AI-driven surveillance.[AI generated]

Why's our monitor labelling this an incident or hazard?

The Trae IDE is an AI system as it uses advanced AI models to assist users. The event describes the use of this AI system leading to unauthorized and persistent data collection, which constitutes a violation of user privacy and potentially breaches legal obligations related to data protection and user consent. These harms fall under violations of human rights and breach of obligations under applicable law protecting fundamental rights. Therefore, this event qualifies as an AI Incident due to the realized harm caused by the AI system's use and data handling practices.[AI generated]
AI principles
Privacy & data governanceTransparency & explainabilityAccountabilityRespect of human rightsRobustness & digital security
Industries
IT infrastructure and hostingDigital security
Affected stakeholders
Consumers
Harm types
Human or fundamental rightsEconomic/PropertyReputational
Severity
AI incident
Business function:
Research and developmentMonitoring and quality control
AI system task:
Interaction support/chatbotsContent generation

Articles about this incident or hazard