Latest / ELECTE's Podcast: AI Frontiers / Your Data Isn't the Asset. The Inference Is.
Transcript
- 0:03SPEAKER_00: This is AI Frontiers.
- 0:05SPEAKER_00: Today, privacy law guards collection, but the value sits in inference.
- 0:10SPEAKER_00: Consent governs what gets collected.
- 0:13SPEAKER_00: Value is captured at what gets inferred.
- 0:16SPEAKER_00: That gap is the privacy story of this decade.
- 0:19SPEAKER_00: 6.3 billion people, 79% of the world's population, now live under a national data protection law.
- 0:27SPEAKER_00: Almost none of those laws govern the thing that carries the value.
- 0:31SPEAKER_00: The General Data Protection Regulation, the GDPR, was built around a model where risk lived at collection.
- 0:38SPEAKER_00: The economics of data moved on.
- 0:41SPEAKER_00: The consent screen did not.
- 0:43SPEAKER_00: An AI stack does not need your record.
- 0:46SPEAKER_00: It needs enough of everyone's fragments to predict what your record would have said.
- 0:50SPEAKER_00: Location traces, purchase patterns, device signals, browsing rhythms.
- 0:55SPEAKER_00: In combination, health, finances, orientation, politics, risk.
- 1:01SPEAKER_00: Remove the name and the prediction still works.
- 1:04SPEAKER_00: Europe's courts saw this first.
- 1:06SPEAKER_00: Three rulings from the Court of Justice of the European Union move the regulated object from the record to the inference.
- 1:13SPEAKER_00: In OT, August 2022, a Lithuanian official had to publish his partner's name.
- 1:19SPEAKER_00: A name is not sensitive data.
- 1:22SPEAKER_00: But because it is liable indirectly to reveal sexual orientation, publishing it is processing special category data.
- 1:29SPEAKER_00: In Linden Apatheika, October 2024, an online pharmacy's order data became health data, regardless of intent and regardless of whether the inference would even be correct.
- 1:42SPEAKER_00: In Shufa, December 2023, a credit reference agency's probability score was itself an automated decision, because banks draw on it so heavily that the score is the refusal.
- 1:54SPEAKER_00: On the 23rd of April 2025, the European Commission fined Meta 200 million euros under the Digital Markets Act, not for collecting data, but for combining it across services without a genuine alternative.
- 2:08SPEAKER_00: The DMA did not find the collection, it fined the combination, the step where fragments become inference.
- 2:14SPEAKER_00: So if you buy software, the privacy notice is now the least important document in your stack.
- 2:20SPEAKER_00: The contract is the most important.
- 2:23SPEAKER_00: Separate collection rights from use rights.
- 2:25SPEAKER_00: Treat we anonymize as the start of a conversation, not the end.
- 2:30SPEAKER_00: The question is no longer what people are willing to share, it is who controls the inference engine.
- 2:37SPEAKER_00: That's AI Frontiers.