New tips from the Spanish Privacy Agency on the use of AI chatbots

New tips from the Spanish Privacy Agency on the use of AI chatbots

Artificial Intelligence (AI) chatbots are revolutionising all sectors. With ChatGPT or Bard being the most widely used, these chatbots not only offer quick answers to our questions, but can also perform increasingly complex tasks, providing significant savings in time spent on daily tasks.

However, as users aware of the importance of privacy and security of our data, it is essential to use chatbots responsibly.

Aware of the privacy risk, the Spanish Data Protection Agency (AEPD) has published some recommendations to take into account in order to use these tools safely.

Tips from the Spanish Data Agency (AEPD)

Aware of the privacy risk, the Spanish Data Protection Agency (AEPD) has published some recommendations to take into account in order to use these tools safely.

1.Understand and review what the ChatBot offers

Before interacting with a chatbot, and posing questions or tasks to it, it is important to understand its purpose. Chatbots are used in a variety of contexts, from providing product information to providing technical support.

Know why the ChatBot has been implemented on a website or application and how it can help you before sharing personal information.

It is also essential to check that it includes a privacy policy detailing the data processing to be carried out, the rights that can be exercised, information about the algorithm used or whether the chatbot will learn from the information provided, as well as clear identification of the data controller.

To the surprise of some users, from Bard, Google’s chatbot, the information and queries made to this chatbot are not only used to train the algorithm of this tool and other paid AI tools offered by Google, but Google has also proceeded to index the results of these conversations in its search engine. Google says that it is true that this is happening, but that they are working on blocking the indexing of conversations.

2. Refuse requests for unnecessary data

The AEPD advises users to refuse requests for unnecessary data, not to give consent for the processing of certain data without granting the possibility of withdrawal of processing or to make international transfers to countries without sufficient guarantees of adequacy implemented.

The AEPD suggests that you only share information that is necessary to fulfil the purpose of the chatbot. In most cases, you should not have to provide highly sensitive data, such as your social security number or financial information. If a chatbot asks for excessive data, consider whether it is really necessary and whether you are comfortable providing it, as loss of control over such data is a possible risk.

If at any time you feel that your data privacy is compromised during a conversation with a chatbot, do not hesitate to inform the authorities or even file a complaint with the AEPD.

In short, AI chatbots are useful tools that can make our lives easier. However, it is essential to use them responsibly and be aware of the privacy of our personal data. By following the AEPD’s recommendations, we can make the most of the convenience of chatbots without putting our personal information at risk. Technology advances, but security and privacy must always be a priority.

At Letslaw by RSM we are lawyers specialized in Privacy matters and Artificial Intelligence (AI) so, our team of Data Protection lawyers, we will be glad to advise you on any aspect that you may require.