EU member states back GDPR amendment: personal data for AI on the basis of legitimate interest
EU member states have backed a proposal to amend the GDPR as part of the European Commission's Digital Omnibus. A new article would allow personal data to be processed for AI systems on the basis of legitimate interest, without prior consent. Privacy organisation noyb warns that large tech companies with existing data collections stand to benefit most; the European Parliament has yet to take a position.
What does this mean? Nothing changes to your obligations yet, but bear in mind that providers may soon train more freely on data; so check the opt-outs and data processing agreements of the AI services you use yourself.
Fake Claude installation pages on claude.ai spread malware via Google ads
Researchers at Gen Digital (Norton, Avast) describe two campaigns in which paid Google ads lead to fake installation guides for Claude, published as Artifacts and shared chats on the genuine claude.ai domain. On a Mac, the page gets you to paste a command into Terminal that installs the infostealer Atomic macOS Stealer; on Windows it involves software that gives attackers remote access. The genuine download page is claude.com/download.
What does this mean? Install Claude only via claude.com/download or a bookmark, don't click search ads, and never paste a Terminal command from a web page; pass this on to colleagues who install AI apps themselves.
Receipt fraud with AI harder to detect, SAP Concur sees 1 percent AI-generated expense claims
Generative AI is making it ever easier to convincingly forge receipts, invoices and other financial documents, reports Accountant.nl, citing the FD. After deploying an AI detector, SAP Concur found eighteen times as many suspected AI-generated receipts; according to the company, roughly 1 per cent of submitted expense claims were made with AI. Detection looks at digital traces such as duplicates, cut-and-paste work and metadata.
What does this mean? If you approve expense claims or invoices, don't just check visually: review metadata and duplicates, and pay particular attention to small amounts that are approved automatically.
Oracle and OpenAI bring Oracle systems and Codex to ChatGPT
Oracle and OpenAI are expanding their partnership with four components. Oracle AI Workspace connects ChatGPT via plugins to, among others, Oracle Fusion Applications and NetSuite and is coming soon; Oracle AI Security Mesh is already available, and Oracle App Composer, which lets you build apps without coding using Codex, is in limited availability. The Oracle AI SMB Bundle, with $12,000 of cloud credit per year, applies only to small businesses in the US.
What does this mean? If you work with NetSuite or Oracle Fusion, you may soon be able to operate data and approved workflows from ChatGPT; wait for availability in Europe and for the data processing arrangements before you deploy it.
