The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Italy fined Meta €805 million after Facebook's Android app used an AI-driven feature to access and recommend users' private photos and videos without explicit consent or adequate disclosure. The violation affected about 20 million users, breaching privacy and data protection laws. Meta must now obtain clear, separate user consent.[AI generated]
Why's our monitor labelling this an incident or hazard?
The event involves an AI system component (the content suggestion function) that accessed and processed personal data without proper consent, directly violating users' privacy rights, which are protected under applicable law. This constitutes a breach of fundamental rights and legal obligations, fulfilling the criteria for an AI Incident. The harm is realized (privacy violation), and the AI system's use is central to the incident. Therefore, this is classified as an AI Incident.[AI generated]