If you’re a Google Gemini consumer, it’s time to assessment the privateness settings for Google’s AI chatbot. It appears to be like like Gemini might have access to documents in Google Drive that it shouldn’t be capable to learn. That’s what occurred with one Gemini consumer who was shocked to find that Gemini might summarize tax returns in a PDF file hosted in Google Drive.
This was a doc the consumer by no means gave Gemini access to, prompting an investigation into Google Gemini’s habits with Google Drive. The conclusions aren’t nice, because it appears to be like like Gemini might be ingesting information from Drive with out the consumer’s permission or information. Even if that information isn’t used to coach the AI particularly, it’s nonetheless a possible violation of privateness.
This incident additional proves that any AI product wants robust privateness options, particularly if it’s made by Google.
Just a few days in the past, I had this to say about some great benefits of having a cloud-based Docs product that provides end-to-end encryption, as I used to be speaking about Proton Docs on the time:
End-to-end encryption protects in opposition to information breaches and mass assortment, and it ensures your information is not going to be used to coach AI. These are all issues to remember when trusting any third-party cloud service supplier with your information, particularly documents you’d prefer to maintain non-public.
It’s not that Google Docs and Microsoft 365 received’t safe your docs, as a result of they do. Those corporations additionally received’t practice AI with your documents. But Proton’s additional end-to-end encryption safety is a lot better. And Google and Microsoft can’t match it but.
Given what Kevin Bankston went by way of, we now have purpose to fret about how Google handles Drive documents. The Gemini consumer by accident found that his tax returns in Google Docs have been scanned by Google’s AI with out his permission. He then tried to seek out out what had occurred and methods to change privateness settings to stop Gemini from taking on information it shouldn’t.
The job is somewhat tough, as even Gemini can’t assist level customers in the precise route for managing their privateness settings. The chatbot hallucinates details about its personal privateness settings.
Bankston was capable of verify that Gemini doesn’t practice on the information in Gemini Workspace, however that wasn’t adequate to clarify why the chatbot accessed the PDF file within the first place. The privateness blunder is all of the extra surprising as Bankston is a paying Google One consumer, which implies he’s getting the premium model of Gemini.
The consumer additional found that Gemini had learn all of his PDF information which might be hosted in Drive as soon as he had requested Gemini for assist with one other certainly one of them.
The startling discoveries continued after somebody gave Bankston the right privateness settings for Gemini AI. The setting that’s supposed to maintain Gemini out of Google Drive docs was enabled. But Gemini accessed these documents nonetheless.
A bit of extra digging might have helped Bankston determine the actual challenge. He signed up for Workspace Labs final 12 months to check Bard earlier than he grew to become a Google One Gemini consumer. This might be the explanation why Google Gemni had access to Google Drive documents it shouldn’t have been capable of learn.
Unfortunately, that’s only one concept for the second. It’s as much as Google to clarify and make clear this obtrusive privateness challenge. Even if just one consumer is affected, which I doubt is the case, it’s nonetheless a large challenge. AI like Gemini ought to by no means access any consumer information with out specific permission.
I’d somewhat need to take care of an avalanche of prompts to conform to Gemini getting information — which is what occurs with ChatGPT access in iOS 18 — than by some means give the AI the ability to access my information in bulk.
If you watched Gemini has accessed any of your non-public information in Google Drive, simply attempt to see whether or not it might probably summarize information from them.
