Fodder for the machine – The European Commission’s plans to facilitate building generative models on our data without our consent (and why we should stop them)

Under the guise of “cutting unnecessary red tape”, the European Commission proposed profound changes to the Union’s regulatory framework for the protection of personal data. To foster the development and deployment of generative models, the Commission’s so-called “Digital Omnibus” package seeks to facilitate building such models on personal data without prior consent by recognizing a company’s “legitimate interest” in doing so. Those changes are based on a fundamental misunderstanding of the regulatory framework and the technology itself. The Commission’s proposal fails to account for well-established requirements and guardrails for the use of personal data without consent (or another justification). Even worse, the package also conveniently ignores that the development and deployment of generative models interfere with people’s privacy extensively and irrevocably. If enacted, the Commission’s proposal will severely impact everyone’s digital privacy. Companies have falsely claimed a “legitimate interest” in harvesting data on every aspect of our human existence before. For them, the proposed changes will serve as an excuse to proceed without anyone’s permission. The purpose of the exploitative use of personal data may have changed, from personalized advertising to building generative models, but the effects will be the same. People will have to carry the burden of protecting their own digital privacy without much help from what will be left of the regulatory framework.