...
...
Evaluating ChatGPT and AI Applications from the Personal Data Protection Perspective

...

Evaluating ChatGPT and AI Applications from the Personal Data Protection Perspective

Posted | Updated by Insights team:

Publication | Update:

May 2023
...

AI Applications Under the Radar of Data Protection Authorities

AI Applications Under the Radar of Data Protection Authorities

Concerns about how artificial intelligence (AI) systems use and store data collected from users have been frequently debated by data protection authorities and professionals dealing with data security and privacy issues lately. These discussions are kept in the public eye through decisions, publications, and press releases related to the subject.

The Italian Data Protection Authority, Garante per la Protezione dei dati personali (“Garante”), has placed ChatGPT at the center of these discussions by temporarily restricting it and later announcing the waiving of this decision on restriction. ChatGPT, a large language model developed by US-based OpenAI, is described as an AI-based chatbot capable of generating human-like language using deep learning algorithms and uses large data sets to produce meaningful responses through natural language processing technology.

There are concerns about the lack of sufficient transparency in how applications like ChatGPT use and store data collected from users during interactions. The basis of these discussions is the thought that ChatGPT's privacy policy is not clear enough, it doesn't provide sufficient information about the use of collected data, it doesn't give users enough control over their data, there's no clear and transparent disclosure about whether sufficient security measures are taken for data protection, and it's uncertain whether user data will be shared with third parties in the event of integration with other applications or services.

Garante's Evaluation of ChatGPT

With the rapid growth trend of ChatGPT recently and its increasing use by everyone, we are going through a period where data protection authorities in the Netherlands, France, Spain, Italy, and the United Kingdom are increasing their oversight of AI-based applications and publishing materials in this field. The most significant step in this regard came first from Italy. On March 20, 2023, in response to a data breach notification affecting ChatGPT user conversations and subscriber payment information, Garante decided to temporarily halt the processing of data of users residing in Italy by the US-based company until the outcome of an investigation into ChatGPT's privacy practices was awaited. The violations that stood out in Garante's decision were the lack of clear and transparent disclosure to users and other data owners about the processing of personal data by ChatGPT, the lack of a legal basis for the collection and storage of personal data in bulk to train the algorithms that form the basis of the platform's operation, incorrect data processing due to provided information not always matching accurate data, and the absence of a filter system for age detection for children, leading to children being exposed to inappropriate responses. Notably, Garante did not find it sufficient for ChatGPT to announce in its privacy policy that its target audience is individuals over the age of 13, particularly child users. Garante's decision is also significant as it does not distinguish between using personal data to create or train an algorithmic model and entering personal data into a developed specific algorithmic model by the user.

Following Garante's temporary restriction decision, ChatGPT was reopened for use in Italy after OpenAI made a series of changes to address data security concerns, including improved transparency and data owner rights. The platform now provides many rights to users, including the right to disable the option for their conversations to be used to train ChatGPT's algorithms. In terms of children's data, controls have been implemented to protect children under the age of 13, and age verification tools have been introduced for users accessing ChatGPT from Italy. Concerning the incorrect processing of data and the fact that accurate data cannot always be provided, a notification was published on the site stating that ChatGPT may generate incorrect information about "people, places, or facts," and several updates were made to the privacy policy.

ChatGPT Turkey Privacy Policy

The Privacy Policy, last updated on April 27, 2023, and published on the site, explains how user data is processed for users accessing ChatGPT from Turkey. It serves as an essential reference for evaluating the status of ChatGPT's data processing processes in light of Personal Data Protection Law No. 6698 Data ("DPL") and secondary legislation.

In its Privacy Policy, ChatGPT notes that the personal data it collects from users, such as chat history, search history, user search queries, browser information, device information, and location information, are processed to provide, manage, maintain, and/or to analyze services, improving user experience through natural language processing and artificial intelligence technologies, enhancing services, communicating with users, preventing misuse of services, securing IT systems and network security, developing new programs and services, fulfilling legal obligations, and protecting the company's legitimate interests. The legal reasons for data processing appear to be based on the establishment and execution of the contract as per DPL, the necessity of data processing to protect legitimate interests, and compliance with legal obligations. It is stated that the terms of use and privacy policy will be assumed to have been accepted when the continue button is clicked after entering the information requested during registration.

ChatGPT provides users with control over the use of their chat history data for the application's development. It is noted that the chat histories of users who do not permit this will be deleted from the systems within 30 days. The absence of an active age verification system during registration is a critical detail expected to be addressed by the Personal Data Protection Board ("Board") for users accessing Turkey.

The Privacy Policy shows that additional information within the scope of GDPR is provided for users in the EU, the United Kingdom, and Switzerland. Evaluating the equivalence of the data processing conditions specified in the Privacy Policy in terms of DPL, it is seen that the data processing conditions in DPL show parallelism with GDPR, including the necessity of processing personal data of the parties to the contract directly related to the establishment or execution of a contract, the necessity of processing data for the data controller to fulfill its legal obligation, and the necessity of processing data for the legitimate interests of the data controller, other than explicit consent. Furthermore, the fact that the Terms of Use and Privacy Policy are only published in English may result in the content not being presented in an easily understandable manner for users accessing from Turkey and users accepting the terms of use without fully understanding them. As for the transfer of data abroad, we anticipate that the current practice will violate DPL for users accessing Turkey. Additionally, registering in the data controllers' registry (VERBIS) is another legal obligation to be considered. It is also necessary to say that AI applications, in general, should pay utmost attention to the right to object to the emergence of a result against the person through the analysis of processed data solely by automatic systems, which is among the rights that must be provided to the relevant persons under DPL. The processing of data in this way may potentially result in adverse outcomes for individuals, which is a reason for objection under DPL. This issue is very detailed under GDPR, and EU countries are not satisfied with this and are preparing separate legislation for artificial intelligence.

On the other hand, countries like the United Kingdom, which approach the subject with a focus on innovation, indicate the necessity of regulating producer artificial intelligence through adopting common principles with a multidisciplinary attitude, addressing opportunities and risks related to artificial intelligence.

Undoubtedly, AI applications like ChatGPT and the automatic processing of personal data in this way will stay on the agenda for a long time, with all its aspects being discussed extensively. For example, AI-based applications like ChatGPT must provide clear and transparent information about their privacy policies and take the necessary steps to protect users' data. Furthermore, data protection authorities are also anticipated to audit these systems to ensure they operate correctly regularly. Generally, all next-generation applications and solutions must undergo a preliminary audit for personal data protection and privacy, and compliance checks and analyses should be conducted before products and applications are made available for use.

Special thanks to Aslı Naz Güzel’ for her contributions.

...
Framed Content Aggregator - Publisher | Sponsor
...
ICLG

ICLG.com is a leading global platform for legal reference, analysis and news, hosting comprehensive comparative legal guides and research tools that cover law in more than 191 jurisdictions across 59 practice areas. ICLG.com also provides daily legal news and legal conference directories, as well as online purchasing of the renowned International Comparative Legal Guide series of print publications. https://iclg.com

SKU code : EB4879C1-BCFC-2AC6-B555-FEF5F253AC67
Delivery Format:
HTML ...

Immediate Delivery
...Access Rights | Content Availability:
...

...

The content of this subscriber knowledge library area, the technology platform and tools are provided for information purposes only. No legal liability or other responsibility is accepted for any errors, omissions, or any loss, damage or inconvenience caused as a result of reliance on such information, or statements on this site, or any site to which these pages connect, since we cannot control the content or take responsibility for pages maintained by external providers. Where we provide links to sites, we do not by doing so endorse any information or opinions appearing in them. This courseware includes resources copyrighted and open educational resources (OER) by multiple individuals and organizations. If someone else is given access to your account login information, that person has read, understands and accepts the Conditions of Use for this platform.

...

Objectives and Study Scope

This study has assimilated knowledge and insight from business and subject-matter experts, and from a broad spectrum of market initiatives. Building on this research, the objectives of this market research report is to provide actionable intelligence on opportunities alongside the market size of various segments, as well as fact-based information on key factors influencing the market- growth drivers, industry-specific challenges and other critical issues in terms of detailed analysis and impact.

The report in its entirety provides a comprehensive overview of the current global condition, as well as notable opportunities and challenges. The analysis reflects market size, latest trends, growth drivers, threats, opportunities, as well as key market segments. The study addresses market dynamics in several geographic segments along with market analysis for the current market environment and future scenario over the forecast period. The report also segments the market into various categories based on the product, end user, application, type, and region.
The report also studies various growth drivers and restraints impacting the  market, plus a comprehensive market and vendor landscape in addition to a SWOT analysis of the key players.  This analysis also examines the competitive landscape within each market. Market factors are assessed by examining barriers to entry and market opportunities. Strategies adopted by key players including recent developments, new product launches, merger and acquisitions, and other insightful updates are provided.

Research Process & Methodology

...

We leverage extensive primary research, our contact database, knowledge of companies and industry relationships, patent and academic journal searches, and Institutes and University associate links to frame a strong visibility in the markets and technologies we cover.

We draw on available data sources and methods to profile developments. We use computerised data mining methods and analytical techniques, including cluster and regression modelling, to identify patterns from publicly available online information on enterprise web sites.
Historical, qualitative and quantitative information is obtained principally from confidential and proprietary sources, professional network, annual reports, investor relationship presentations, and expert interviews, about key factors, such as recent trends in industry performance and identify factors underlying those trends - drivers, restraints, opportunities, and challenges influencing the growth of the market, for both, the supply and demand sides.
In addition to our own desk research, various secondary sources, such as Hoovers, Dun & Bradstreet, Bloomberg BusinessWeek, Statista, are referred to identify key players in the industry, supply chain and market size, percentage shares, splits, and breakdowns into segments and subsegments with respect to individual growth trends, prospects, and contribution to the total market.

Research Portfolio Sources:

  • BBC Monitoring

  • BMI Research: Company Reports, Industry Reports, Special Reports, Industry Forecast Scenario

  • CIMB: Company Reports, Daily Market News, Economic Reports, Industry Reports, Strategy Reports, and Yearbooks

  • Dun & Bradstreet: Country Reports, Country Riskline Reports, Economic Indicators 5yr Forecast, and Industry Reports

  • EMIS: EMIS Insight and EMIS Dealwatch

  • Enerdata: Energy Data Set, Energy Market Report, Energy Prices, LNG Trade Data and World Refineries Data

  • Euromoney: China Law and Practice, Emerging Markets, International Tax Review, Latin Finance, Managing Intellectual Property, Petroleum Economist, Project Finance, and Euromoney Magazine

  • Euromonitor International: Industry Capsules, Local Company Profiles, Sector Capsules

  • Fitch Ratings: Criteria Reports, Outlook Report, Presale Report, Press Releases, Special Reports, Transition Default Study Report

  • FocusEconomics: Consensus Forecast Country Reports

  • Ken Research: Industry Reports, Regional Industry Reports and Global Industry Reports

  • MarketLine: Company Profiles and Industry Profiles

  • OECD: Economic Outlook, Economic Surveys, Energy Prices and Taxes, Main Economic Indicators, Main Science and Technology Indicators, National Accounts, Quarterly International Trade Statistics

  • Oxford Economics: Global Industry Forecasts, Country Economic Forecasts, Industry Forecast Data, and Monthly Industry Briefings

  • Progressive Digital Media: Industry Snapshots, News, Company Profiles, Energy Business Review

  • Project Syndicate: News Commentary

  • Technavio: Global Market Assessment Reports, Regional Market Assessment Reports, and Market Assessment Country Reports

  • The Economist Intelligence Unit: Country Summaries, Industry Briefings, Industry Reports and Industry Statistics

Global Business Reviews, Research Papers, Commentary & Strategy Reports

  • World Bank

  • World Trade Organization

  • The Financial Times

  • The Wall Street Journal

  • The Wall Street Transcript

  • Bloomberg

  • Standard & Poor’s Industry Surveys

  • Thomson Research

  • Thomson Street Events

  • Reuter 3000 Xtra

  • OneSource Business

  • Hoover’s

  • MGI

  • LSE

  • MIT

  • ERA

  • BBVA

  • IDC

  • IdExec

  • Moody’s

  • Factiva

  • Forrester Research

  • Computer Economics

  • Voice and Data

  • SIA / SSIR

  • Kiplinger Forecasts

  • Dialog PRO

  • LexisNexis

  • ISI Emerging Markets

  • McKinsey

  • Deloitte

  • Oliver Wyman

  • Faulkner Information Services

  • Accenture

  • Ipsos

  • Mintel

  • Statista

  • Bureau van Dijk’s Amadeus

  • EY

  • PwC

  • Berg Insight

  • ABI research

  • Pyramid Research

  • Gartner Group

  • Juniper Research

  • MarketsandMarkets

  • GSA

  • Frost and Sullivan Analysis

  • McKinsey Global Institute

  • European Mobile and Mobility Alliance

  • Open Europe

M&A and Risk Management | Regulation

  • Thomson Mergers & Acquisitions

  • MergerStat

  • Profound

  • DDAR

  • ISS Corporate Governance

  • BoardEx

  • Board Analyst

  • Securities Mosaic

  • Varonis

  • International Tax and Business Guides

  • CoreCompensation

  • CCH Research Network

...
Forecast methodology

The future outlook “forecast” is based on a set of statistical methods such as regression analysis, industry specific drivers as well as analyst evaluations, as well as analysis of the trends that influence economic outcomes and business decision making.
The Global Economic Model is covering the political environment, the macroeconomic environment, market opportunities, policy towards free enterprise and competition, policy towards foreign investment, foreign trade and exchange controls, taxes, financing, the labour market and infrastructure. We aim update our market forecast to include the latest market developments and trends.

Forecasts, Data modelling and indicator normalisation

Review of independent forecasts for the main macroeconomic variables by the following organizations provide a holistic overview of the range of alternative opinions:

  • Cambridge Econometrics (CE)

  • The Centre for Economic and Business Research (CEBR)

  • Experian Economics (EE)

  • Oxford Economics (OE)

As a result, the reported forecasts derive from different forecasters and may not represent the view of any one forecaster over the whole of the forecast period. These projections provide an indication of what is, in our view most likely to happen, not what it will definitely happen.

Short- and medium-term forecasts are based on a “demand-side” forecasting framework, under the assumption that supply adjusts to meet demand either directly through changes in output or through the depletion of inventories.
Long-term projections rely on a supply-side framework, in which output is determined by the availability of labour and capital equipment and the growth in productivity.
Long-term growth prospects, are impacted by factors including the workforce capabilities, the openness of the economy to trade, the legal framework, fiscal policy, the degree of government regulation.

Direct contribution to GDP
The method for calculating the direct contribution of an industry to GDP, is to measure its ‘gross value added’ (GVA); that is, to calculate the difference between the industry’s total pre­tax revenue and its total bought­in costs (costs excluding wages and salaries).

Forecasts of GDP growth: GDP = CN+IN+GS+NEX

GDP growth estimates take into account:

  • Consumption, expressed as a function of income, wealth, prices and interest rates;

  • Investment as a function of the return on capital and changes in capacity utilization; Government spending as a function of intervention initiatives and state of the economy;

  • Net exports as a function of global economic conditions.

CLICK BELOW TO LEARN MORE
...

Market Quantification
All relevant markets are quantified utilizing revenue figures for the forecast period. The Compound Annual Growth Rate (CAGR) within each segment is used to measure growth and to extrapolate data when figures are not publicly available.

Revenues

Our market segments reflect major categories and subcategories of the global market, followed by an analysis of statistical data covering national spending and international trade relations and patterns. Market values reflect revenues paid by the final customer / end user to vendors and service providers either directly or through distribution channels, excluding VAT. Local currencies are converted to USD using the yearly average exchange rates of local currencies to the USD for the respective year as provided by the IMF World Economic Outlook Database.

Industry Life Cycle Market Phase

Market phase is determined using factors in the Industry Life Cycle model. The adapted market phase definitions are as follows:

  • Nascent: New market need not yet determined; growth begins increasing toward end of cycle

  • Growth: Growth trajectory picks up; high growth rates

  • Mature: Typically fewer firms than growth phase, as dominant solutions continue to capture the majority of market share and market consolidation occurs, displaying lower growth rates that are typically on par with the general economy

  • Decline: Further market consolidation, rapidly declining growth rates

...

The Global Economic Model
The Global Economic Model brings together macroeconomic and sectoral forecasts for quantifying the key relationships.

The model is a hybrid statistical model that uses macroeconomic variables and inter-industry linkages to forecast sectoral output. The model is used to forecast not just output, but prices, wages, employment and investment. The principal variables driving the industry model are the components of final demand, which directly or indirectly determine the demand facing each industry. However, other macroeconomic assumptions — in particular exchange rates, as well as world commodity prices — also enter into the equation, as well as other industry specific factors that have been or are expected to impact.

  • Vector Auto Regression (VAR) statistical models capturing the linear interdependencies among multiple time series, are best used for short-term forecasting, whereby shocks to demand will generate economic cycles that can be influenced by fiscal and monetary policy.

  • Dynamic-Stochastic Equilibrium (DSE) models replicate the behaviour of the economy by analyzing the interaction of economic variables, whereby output is determined by supply side factors, such as investment, demographics, labour participation and productivity.

  • Dynamic Econometric Error Correction (DEEC) modelling combines VAR and DSE models by estimating the speed at which a dependent variable returns to its equilibrium after a shock, as well as assessing the impact of a company, industry, new technology, regulation, or market change. DEEC modelling is best suited for forecasting.

Forecasts of GDP growth per capita based on these factors can then be combined with demographic projections to give forecasts for overall GDP growth.
Wherever possible, publicly available data from official sources are used for the latest available year. Qualitative indicators are normalised (on the basis of: Normalised x = (x - Min(x)) / (Max(x) - Min(x)) where Min(x) and Max(x) are, the lowest and highest values for any given indicator respectively) and then aggregated across categories to enable an overall comparison. The normalised value is then transformed into a positive number on a scale of 0 to 100. The weighting assigned to each indicator can be changed to reflect different assumptions about their relative importance.

CLICK BELOW TO LEARN MORE
...

The principal explanatory variable in each industry’s output equation is the Total Demand variable, encompassing exogenous macroeconomic assumptions, consumer spending and investment, and intermediate demand for goods and services by sectors of the economy for use as inputs in the production of their own goods and services.

Elasticities
Elasticity measures the response of one economic variable to a change in another economic variable, whether the good or service is demanded as an input into a final product or whether it is the final product, and provides insight into the proportional impact of different economic actions and policy decisions.
Demand elasticities measure the change in the quantity demanded of a particular good or service as a result of changes to other economic variables, such as its own price, the price of competing or complementary goods and services, income levels, taxes.
Demand elasticities can be influenced by several factors. Each of these factors, along with the specific characteristics of the product, will interact to determine its overall responsiveness of demand to changes in prices and incomes.
The individual characteristics of a good or service will have an impact, but there are also a number of general factors that will typically affect the sensitivity of demand, such as the availability of substitutes, whereby the elasticity is typically higher the greater the number of available substitutes, as consumers can easily switch between different products.
The degree of necessity. Luxury products and habit forming ones, typically have a higher elasticity.
Proportion of the budget consumed by the item. Products that consume a large portion of the consumer’s budget tend to have greater elasticity.
Elasticities tend to be greater over the long run because consumers have more time to adjust their behaviour.
Finally, if the product or service is an input into a final product then the price elasticity will depend on the price elasticity of the final product, its cost share in the production costs, and the availability of substitutes for that good or service.

Prices
Prices are also forecast using an input-output framework. Input costs have two components; labour costs are driven by wages, while intermediate costs are computed as an input-output weighted aggregate of input sectors’ prices. Employment is a function of output and real sectoral wages, that are forecast as a function of whole economy growth in wages. Investment is forecast as a function of output and aggregate level business investment.

CLICK BELOW TO LEARN MORE
...