<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Maple privacy timeline</title><link>https://maple.ai/privacy-timeline</link><atom:link href="https://maple.ai/privacy-timeline/rss.xml" rel="self" type="application/rss+xml"/><description>A sourced, running record of breaches, policy changes, overreach and regulation in AI and personal data.</description><language>en-us</language><lastBuildDate>Fri, 16 Oct 2026 00:00:00 GMT</lastBuildDate><item><title>Bee Cheng Hiang: AI-written email script exposed 95,364 addresses</title><link>https://maple.ai/privacy-timeline#2026-09-21-bee-cheng-hiang-ai-email-exposure</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-09-21-bee-cheng-hiang-ai-email-exposure</guid><pubDate>Mon, 21 Sep 2026 00:00:00 GMT</pubDate><category>Breaches and leaks</category><description>Singapore&apos;s data regulator said an employee&apos;s generative AI email script exposed 95,364 members&apos; email addresses to other recipients in an April 25, 2026 campaign. Source: https://www.pdpc.gov.sg/organisations/regulations-decisions/enforcement-decisions/voluntary-undertaking-by-bee-cheng-hiang-marketing-pte-ltd</description></item>
<item><title>Anthropic: Korea addendum shares identity-verification data</title><link>https://maple.ai/privacy-timeline#2026-09-10-anthropic-korea-identity-sharing</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-09-10-anthropic-korea-identity-sharing</guid><pubDate>Thu, 10 Sep 2026 00:00:00 GMT</pubDate><category>Policy changes</category><description>For users covered by Korea&apos;s privacy law, identity-verification data may be shared with the Korea Credit Bureau. Source: https://www.anthropic.com/legal/privacy</description></item>
<item><title>OpenAI: Past chats can personalize ChatGPT ads</title><link>https://maple.ai/privacy-timeline#2026-08-24-chatgpt-ads-past-chats</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-08-24-chatgpt-ads-past-chats</guid><pubDate>Mon, 24 Aug 2026 00:00:00 GMT</pubDate><category>Policy changes</category><description>When ad personalization is available and on, past chats are used to make ads more relevant for Free and Go users. Source: https://openai.com/policies/eu-privacy-policy/</description></item>
<item><title>xAI: Grok policy names SpaceXAI as controller</title><link>https://maple.ai/privacy-timeline#2026-08-24-grok-spacexai-controller</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-08-24-grok-spacexai-controller</guid><pubDate>Mon, 24 Aug 2026 00:00:00 GMT</pubDate><category>Policy changes</category><description>The Grok privacy policy names SpaceXAI LLC as the controller for the Grok app and grok.com. Source: https://x.ai/legal/privacy-policy</description></item>
<item><title>Microsoft: Copilot ads may use chat history</title><link>https://maple.ai/privacy-timeline#2026-08-18-copilot-ads-chat-history</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-08-18-copilot-ads-chat-history</guid><pubDate>Tue, 18 Aug 2026 00:00:00 GMT</pubDate><category>Policy changes</category><description>If ads personalization is on, personalized ads may use chat history, saved memories, and other Microsoft data you chose to share. Source: https://support.microsoft.com/en-us/privacy/microsoft-copilot/privacy-controls</description></item>
<item><title>Microsoft: Copilot app narrows its training statement</title><link>https://maple.ai/privacy-timeline#2026-08-18-copilot-narrows-training-statement</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-08-18-copilot-narrows-training-statement</guid><pubDate>Tue, 18 Aug 2026 00:00:00 GMT</pubDate><category>Policy changes</category><description>New wording says prompts, responses and file contents aren’t used to train “foundation models”; the older FAQ said “generative AI models.” Source: https://support.microsoft.com/en-us/privacy/microsoft-copilot/activity-history</description></item>
<item><title>Atlassian: Atlassian starts AI training on cloud data</title><link>https://maple.ai/privacy-timeline#2026-08-17-atlassian-ai-training-cloud-data</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-08-17-atlassian-ai-training-cloud-data</guid><pubDate>Mon, 17 Aug 2026 00:00:00 GMT</pubDate><category>Policy changes</category><description>Cloud customer metadata and in-app content, such as Jira and Confluence text, began to be used to improve Atlassian&apos;s AI; metadata opt-out is Enterprise-only. Source: https://www.atlassian.com/trust/ai/data-contribution/faqs</description></item>
<item><title>European Union: EU restores voluntary message scanning law</title><link>https://maple.ai/privacy-timeline#2026-07-24-eu-message-scanning-regulation</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-07-24-eu-message-scanning-regulation</guid><pubDate>Fri, 24 Jul 2026 00:00:00 GMT</pubDate><category>Overreach</category><description>Regulation 2026/1881 was adopted, again allowing messaging providers to scan communications for child sexual abuse until April 2028, excluding end-to-end encrypted communications. Source: https://eur-lex.europa.eu/eli/reg/2026/1881/oj/eng</description></item>
<item><title>Character.AI: Italy fines Character.AI €158,000</title><link>https://maple.ai/privacy-timeline#2026-07-09-garante-character-ai-fine</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-07-09-garante-character-ai-fine</guid><pubDate>Thu, 09 Jul 2026 00:00:00 GMT</pubDate><category>Regulation</category><description>Italy&apos;s Garante fined Character Technologies €158,000 over its privacy notice, a late impact assessment, and age verification for minors. Source: https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/10269594</description></item>
<item><title>Anthropic: Claude policy adds age checks and sharing</title><link>https://maple.ai/privacy-timeline#2026-07-08-claude-age-checks-connected-apps</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-07-08-claude-age-checks-connected-apps</guid><pubDate>Wed, 08 Jul 2026 00:00:00 GMT</pubDate><category>Policy changes</category><description>Consumer accounts may be asked for age or identity data, and multi-step tasks can share inputs and outputs with connected apps. Source: https://www.anthropic.com/legal/privacy</description></item>
<item><title>Microsoft: Copilot in Edge can read page content</title><link>https://maple.ai/privacy-timeline#2026-06-01-copilot-edge-page-content</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-06-01-copilot-edge-page-content</guid><category>Policy changes</category><description>June 2026: Copilot in Edge may access page content, tabs, browsing history, and visual snapshots of the page. Source: https://www.microsoft.com/en-us/privacy/updates</description></item>
<item><title>Microsoft: Copilot Health uses health information</title><link>https://maple.ai/privacy-timeline#2026-06-01-copilot-health-information</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-06-01-copilot-health-information</guid><category>Policy changes</category><description>June 2026: Copilot Health uses health information to provide personalized assistance focused on health and wellness. Source: https://www.microsoft.com/en-us/privacy/updates</description></item>
<item><title>European Union: EU agrees to delay AI Act high-risk rules</title><link>https://maple.ai/privacy-timeline#2026-05-07-eu-ai-act-high-risk-delay</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-05-07-eu-ai-act-high-risk-delay</guid><pubDate>Thu, 07 May 2026 00:00:00 GMT</pubDate><category>Regulation</category><description>Lawmakers agreed to move AI Act high-risk deadlines to December 2027 and August 2028 and to ban AI nudifier apps. Source: https://www.europarl.europa.eu/news/en/press-room/20260427IPR42011/ai-act-deal-on-simplification-measures-ban-on-nudifier-apps</description></item>
<item><title>xAI: Google app data excluded from training</title><link>https://maple.ai/privacy-timeline#2026-04-04-grok-google-apps-training-limit</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-04-04-grok-google-apps-training-limit</guid><pubDate>Sat, 04 Apr 2026 00:00:00 GMT</pubDate><category>Policy changes</category><description>Content from Google apps connected through Google OAuth is not used for internal AI or model training. Source: https://x.ai/legal/privacy-policy/previous-2026-04-04</description></item>
<item><title>xAI: Grok policy adds targeted advertising</title><link>https://maple.ai/privacy-timeline#2026-04-04-grok-targeted-advertising</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-04-04-grok-targeted-advertising</guid><pubDate>Sat, 04 Apr 2026 00:00:00 GMT</pubDate><category>Policy changes</category><description>The Grok privacy policy adds delivering targeted advertising as a listed use of personal information. Source: https://x.ai/legal/privacy-policy/previous-2026-04-04</description></item>
<item><title>OpenAI: ChatGPT adds controls for personalized ads</title><link>https://maple.ai/privacy-timeline#2026-04-01-chatgpt-ad-controls</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-04-01-chatgpt-ad-controls</guid><pubDate>Wed, 01 Apr 2026 00:00:00 GMT</pubDate><category>Policy changes</category><description>Account settings include controls over what data is used to personalize ads shown on the services. Source: https://openai.com/policies/eu-privacy-policy/</description></item>
<item><title>OpenAI: Parents can link ChatGPT teen accounts</title><link>https://maple.ai/privacy-timeline#2026-04-01-chatgpt-teen-account-linking</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-04-01-chatgpt-teen-account-linking</guid><pubDate>Wed, 01 Apr 2026 00:00:00 GMT</pubDate><category>Policy changes</category><description>Teen users and a parent or guardian can link accounts so the adult can manage settings and receive safety alerts. Source: https://openai.com/policies/eu-privacy-policy/</description></item>
<item><title>GitHub: GitHub to train on Copilot interaction data</title><link>https://maple.ai/privacy-timeline#2026-03-25-github-copilot-training-data</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-03-25-github-copilot-training-data</guid><pubDate>Wed, 25 Mar 2026 00:00:00 GMT</pubDate><category>Policy changes</category><description>Blog post: Copilot Free, Pro and Pro+ interaction data, including code snippets, would train GitHub&apos;s AI models from April 24 unless users opt out. Source: https://github.blog/news-insights/company-news/updates-to-github-copilot-interaction-data-usage-policy/</description></item>
<item><title>Microsoft: Statement drops stated retention periods</title><link>https://maple.ai/privacy-timeline#2026-03-01-microsoft-retention-periods-removed</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-03-01-microsoft-retention-periods-removed</guid><category>Policy changes</category><description>March 2026: The privacy statement no longer describes specific retention periods in its Bing and Advertising sections. Source: https://www.microsoft.com/en-us/privacy/updates</description></item>
<item><title>Anthropic: Court rules Claude chats not privileged</title><link>https://maple.ai/privacy-timeline#2026-02-10-claude-chats-not-privileged</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-02-10-claude-chats-not-privileged</guid><pubDate>Tue, 10 Feb 2026 00:00:00 GMT</pubDate><category>Overreach</category><description>A federal judge ruled that a criminal defendant&apos;s written exchanges with Anthropic&apos;s Claude were not protected from government inspection by attorney-client privilege or work product. Source: https://storage.courtlistener.com/recap/gov.uscourts.nysd.652138/gov.uscourts.nysd.652138.27.0.pdf</description></item>
<item><title>X and xAI: UK ICO opens investigation into Grok</title><link>https://maple.ai/privacy-timeline#2026-02-03-ico-grok-investigation</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-02-03-ico-grok-investigation</guid><pubDate>Tue, 03 Feb 2026 00:00:00 GMT</pubDate><category>Regulation</category><description>The UK ICO opened formal investigations into X and xAI over Grok&apos;s processing of personal data and its generation of sexualized images. Source: https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/02/ico-announces-investigation-into-grok/</description></item>
<item><title>Google: Gemini app connections start off by default</title><link>https://maple.ai/privacy-timeline#2026-01-14-gemini-app-connections-off-default</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-01-14-gemini-app-connections-off-default</guid><pubDate>Wed, 14 Jan 2026 00:00:00 GMT</pubDate><category>Policy changes</category><description>Connecting Gmail, Photos, YouTube, and Search is off by default, and Gemini does not train directly on Gmail or Photos. Source: https://blog.google/innovation-and-ai/products/gemini-app/personal-intelligence/</description></item>
<item><title>OpenAI: Judge upholds 20 million ChatGPT log order</title><link>https://maple.ai/privacy-timeline#2026-01-05-openai-20-million-logs-affirmed</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2026-01-05-openai-20-million-logs-affirmed</guid><pubDate>Mon, 05 Jan 2026 00:00:00 GMT</pubDate><category>Overreach</category><description>A federal district judge denied OpenAI&apos;s objections and affirmed orders requiring production of 20 million de-identified ChatGPT conversation logs. Source: https://storage.courtlistener.com/recap/gov.uscourts.nysd.640396/gov.uscourts.nysd.640396.1021.0.pdf</description></item>
<item><title>Council of the EU: EU Council agrees position on Chat Control</title><link>https://maple.ai/privacy-timeline#2025-11-26-eu-council-chat-control-position</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-11-26-eu-council-chat-control-position</guid><pubDate>Wed, 26 Nov 2025 00:00:00 GMT</pubDate><category>Overreach</category><description>Member states agreed the Council position on the child sexual abuse regulation, including making permanent an exemption that lets companies voluntarily scan messages. Source: https://www.consilium.europa.eu/en/press/press-releases/2025/11/26/child-sexual-abuse-council-reaches-position-on-law-protecting-children-from-online-abuse/</description></item>
<item><title>OpenAI: Mixpanel breach exposed OpenAI API user details</title><link>https://maple.ai/privacy-timeline#2025-11-26-openai-mixpanel-breach</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-11-26-openai-mixpanel-breach</guid><pubDate>Wed, 26 Nov 2025 00:00:00 GMT</pubDate><category>Breaches and leaks</category><description>An attacker exported data from analytics vendor Mixpanel, including names, emails, and approximate locations of some OpenAI API users; chats were not exposed. Source: https://openai.com/index/mixpanel-incident/</description></item>
<item><title>OpenAI: Court orders 20 million ChatGPT logs produced</title><link>https://maple.ai/privacy-timeline#2025-11-07-openai-20-million-logs-order</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-11-07-openai-20-million-logs-order</guid><pubDate>Fri, 07 Nov 2025 00:00:00 GMT</pubDate><category>Overreach</category><description>A federal magistrate judge ordered OpenAI to produce 20 million de-identified consumer ChatGPT logs to news plaintiffs in the copyright litigation. Source: https://storage.courtlistener.com/recap/gov.uscourts.nysd.640396/gov.uscourts.nysd.640396.734.0.pdf</description></item>
<item><title>State of California: California enacts companion chatbot law SB 243</title><link>https://maple.ai/privacy-timeline#2025-10-13-california-sb-243</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-10-13-california-sb-243</guid><pubDate>Mon, 13 Oct 2025 00:00:00 GMT</pubDate><category>Regulation</category><description>The governor signed SB 243, requiring companion chatbots to disclose they are AI and maintain self-harm response protocols, with protections for minors. Source: https://www.gov.ca.gov/2025/10/13/governor-newsom-signs-bills-to-further-strengthen-californias-leadership-in-protecting-children-online/</description></item>
<item><title>OpenAI: Court ends OpenAI&apos;s ongoing chat preservation duty</title><link>https://maple.ai/privacy-timeline#2025-10-09-openai-preservation-order-ended</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-10-09-openai-preservation-order-ended</guid><pubDate>Thu, 09 Oct 2025 00:00:00 GMT</pubDate><category>Overreach</category><description>A court-approved stipulation ended OpenAI’s ongoing duty to preserve deleted ChatGPT output logs as of September 26, 2025; earlier logs stay, except EEA, Swiss and UK data, and listed-domain accounts remain preserved. Source: https://storage.courtlistener.com/recap/gov.uscourts.nysd.612697/gov.uscourts.nysd.612697.922.0.pdf</description></item>
<item><title>Meta: Meta to use AI chats for ads</title><link>https://maple.ai/privacy-timeline#2025-10-01-meta-ai-chats-for-ads</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-10-01-meta-ai-chats-for-ads</guid><pubDate>Wed, 01 Oct 2025 00:00:00 GMT</pubDate><category>Policy changes</category><description>Newsroom post: content and ad recommendations would be personalized based on people&apos;s interactions with Meta&apos;s generative AI features, starting December 16, 2025. Source: https://about.fb.com/news/2025/10/improving-your-recommendations-apps-ai-meta/</description></item>
<item><title>OpenAI: Federal warrant issued for a user’s ChatGPT records</title><link>https://maple.ai/privacy-timeline#2025-09-12-chatgpt-records-warrant</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-09-12-chatgpt-records-warrant</guid><pubDate>Fri, 12 Sep 2025 00:00:00 GMT</pubDate><category>Overreach</category><description>A federal magistrate judge in Maine issued a warrant for OpenAI records of a user’s ChatGPT searches; the return shows it was executed the next day. Source: https://storage.courtlistener.com/recap/gov.uscourts.med.68916/gov.uscourts.med.68916.3.0.pdf</description></item>
<item><title>Federal Trade Commission: FTC orders seven AI chatbot firms to report</title><link>https://maple.ai/privacy-timeline#2025-09-11-ftc-ai-chatbot-6b-orders</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-09-11-ftc-ai-chatbot-6b-orders</guid><pubDate>Thu, 11 Sep 2025 00:00:00 GMT</pubDate><category>Regulation</category><description>6(b) orders went to seven companies, including OpenAI, Meta, and Character.AI, on how their companion chatbots affect children and teens. Source: https://www.ftc.gov/news-events/news/press-releases/2025/09/ftc-launches-inquiry-ai-chatbots-acting-companions</description></item>
<item><title>Salesloft: Drift chatbot OAuth tokens stolen and misused</title><link>https://maple.ai/privacy-timeline#2025-09-06-salesloft-drift-token-theft</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-09-06-salesloft-drift-token-theft</guid><pubDate>Sat, 06 Sep 2025 00:00:00 GMT</pubDate><category>Breaches and leaks</category><description>Trust center update: an attacker stole OAuth tokens for Drift AI chat integrations and used them to take customer data, including from Salesforce in August 2025. Source: https://trust.salesloft.com/</description></item>
<item><title>Anthropic: Claude consumer chats may train models</title><link>https://maple.ai/privacy-timeline#2025-08-28-claude-consumer-chat-training</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-08-28-claude-consumer-chat-training</guid><pubDate>Thu, 28 Aug 2025 00:00:00 GMT</pubDate><category>Policy changes</category><description>Claude Free, Pro and Max users were asked to choose whether chats train Anthropic&apos;s models; retention extends to five years for those who allow it. Source: https://www.anthropic.com/news/updates-to-our-consumer-terms</description></item>
<item><title>OpenAI: OpenAI may refer some chats to police</title><link>https://maple.ai/privacy-timeline#2025-08-26-openai-law-enforcement-referrals</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-08-26-openai-law-enforcement-referrals</guid><pubDate>Tue, 26 Aug 2025 00:00:00 GMT</pubDate><category>Overreach</category><description>Company post: human reviewers examine conversations flagged for planned harm to others, and OpenAI may refer imminent threats of serious physical harm to law enforcement. Source: https://openai.com/index/helping-people-when-they-need-it-most/</description></item>
<item><title>Google: Gemini to sample user uploads for improvement</title><link>https://maple.ai/privacy-timeline#2025-08-13-gemini-keep-activity-uploads</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-08-13-gemini-keep-activity-uploads</guid><pubDate>Wed, 13 Aug 2025 00:00:00 GMT</pubDate><category>Policy changes</category><description>Blog post: Gemini Apps Activity would be renamed Keep Activity and, when on, a sample of future uploads used to improve Google services. Source: https://blog.google/products-and-platforms/products/gemini/temporary-chats-privacy-controls/</description></item>
<item><title>Change Healthcare: Change Healthcare breach reaches 192.7 million people</title><link>https://maple.ai/privacy-timeline#2025-07-31-change-healthcare-192-million</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-07-31-change-healthcare-192-million</guid><pubDate>Thu, 31 Jul 2025 00:00:00 GMT</pubDate><category>Breaches and leaks</category><description>HHS&apos;s Office for Civil Rights was told that about 192.7 million people were affected by Change Healthcare&apos;s 2024 ransomware attack. Source: https://www.hhs.gov/hipaa/for-professionals/special-topics/change-healthcare-cybersecurity-incident-frequently-asked-questions/index.html</description></item>
<item><title>xAI: Grok training objection moves into settings</title><link>https://maple.ai/privacy-timeline#2025-07-10-grok-training-objection-settings</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-07-10-grok-training-objection-settings</guid><pubDate>Thu, 10 Jul 2025 00:00:00 GMT</pubDate><category>Policy changes</category><description>People in Europe can object in settings to use of their information to train Grok models. Source: https://x.ai/legal/privacy-policy/previous-2025-07-10</description></item>
<item><title>Paradox.ai: Hiring chatbot test account exposed applicant chats</title><link>https://maple.ai/privacy-timeline#2025-07-09-paradox-hiring-chatbot-exposure</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-07-09-paradox-hiring-chatbot-exposure</guid><pubDate>Wed, 09 Jul 2025 00:00:00 GMT</pubDate><category>Breaches and leaks</category><description>Researchers used a legacy test account password to reach chat records in one client&apos;s AI hiring assistant, viewing five U.S. candidates&apos; contact details. Source: https://www.paradox.ai/blog/responsible-security-update</description></item>
<item><title>Luka (Replika): Italy fines Replika maker €5 million</title><link>https://maple.ai/privacy-timeline#2025-05-19-garante-replika-fine</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-05-19-garante-replika-fine</guid><pubDate>Mon, 19 May 2025 00:00:00 GMT</pubDate><category>Regulation</category><description>Italy&apos;s Garante fined Luka Inc. €5 million over Replika&apos;s legal basis for processing, its privacy policy, and lack of age verification. Source: https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/10132048</description></item>
<item><title>OpenAI: Court orders OpenAI to keep deleted chats</title><link>https://maple.ai/privacy-timeline#2025-05-13-openai-deleted-chats-preservation</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-05-13-openai-deleted-chats-preservation</guid><pubDate>Tue, 13 May 2025 00:00:00 GMT</pubDate><category>Overreach</category><description>A federal magistrate judge ordered OpenAI to preserve and segregate all ChatGPT output log data that would otherwise be deleted, including at users&apos; request. Source: https://storage.courtlistener.com/recap/gov.uscourts.nysd.612697/gov.uscourts.nysd.612697.551.0_1.pdf</description></item>
<item><title>Meta: Meta resumes AI training on EU content</title><link>https://maple.ai/privacy-timeline#2025-04-14-meta-eu-ai-training-resumed</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-04-14-meta-eu-ai-training-resumed</guid><pubDate>Mon, 14 Apr 2025 00:00:00 GMT</pubDate><category>Policy changes</category><description>Newsroom post: Meta&apos;s AI would be trained on public posts and comments from adults in the EU, and on their interactions with Meta AI. Source: https://about.fb.com/news/2025/04/making-ai-work-harder-for-europeans/</description></item>
<item><title>Apple: Apple pulls Advanced Data Protection in the UK</title><link>https://maple.ai/privacy-timeline#2025-02-24-apple-adp-uk-withdrawn</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-02-24-apple-adp-uk-withdrawn</guid><pubDate>Mon, 24 Feb 2025 00:00:00 GMT</pubDate><category>Overreach</category><description>Advanced Data Protection, Apple&apos;s end-to-end encryption for iCloud, stopped being offered to new users in the United Kingdom. Source: https://support.apple.com/en-us/122234</description></item>
<item><title>xAI: Parents must agree for teenage Grok use</title><link>https://maple.ai/privacy-timeline#2025-02-14-grok-teen-parental-consent</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-02-14-grok-teen-parental-consent</guid><pubDate>Fri, 14 Feb 2025 00:00:00 GMT</pubDate><category>Policy changes</category><description>Parents of teenagers ages 13 to 17 must agree to the terms before those teenagers use the service. Source: https://x.ai/legal/privacy-policy</description></item>
<item><title>European Union: EU AI Act prohibitions take effect</title><link>https://maple.ai/privacy-timeline#2025-02-02-eu-ai-act-prohibitions</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-02-02-eu-ai-act-prohibitions</guid><pubDate>Sun, 02 Feb 2025 00:00:00 GMT</pubDate><category>Regulation</category><description>The AI Act&apos;s bans on prohibited practices, such as social scoring and workplace emotion recognition, began to apply. Source: https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai</description></item>
<item><title>DeepSeek: Italy orders DeepSeek to stop processing data</title><link>https://maple.ai/privacy-timeline#2025-01-30-garante-deepseek-processing-ban</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-01-30-garante-deepseek-processing-ban</guid><pubDate>Thu, 30 Jan 2025 00:00:00 GMT</pubDate><category>Regulation</category><description>Italy&apos;s Garante ordered DeepSeek&apos;s two Chinese operators to stop processing Italian users&apos; data, effective immediately, and opened an investigation. Source: https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/10097450</description></item>
<item><title>xAI: Temporary Grok chats kept for 30 days</title><link>https://maple.ai/privacy-timeline#2025-01-02-grok-temporary-chats-30-days</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2025-01-02-grok-temporary-chats-30-days</guid><pubDate>Thu, 02 Jan 2025 00:00:00 GMT</pubDate><category>Policy changes</category><description>Temporary chats do not appear in history and are kept for up to 30 days for safety purposes. Source: https://x.ai/legal/privacy-policy</description></item>
<item><title>OpenAI: Italy fines OpenAI €15 million</title><link>https://maple.ai/privacy-timeline#2024-12-20-garante-openai-fine</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2024-12-20-garante-openai-fine</guid><pubDate>Fri, 20 Dec 2024 00:00:00 GMT</pubDate><category>Regulation</category><description>Italy&apos;s Garante fined OpenAI €15 million over ChatGPT&apos;s legal basis for training, transparency, and breach notification; a Rome court later upheld OpenAI&apos;s appeal. Source: https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/10085432</description></item>
<item><title>xAI: Grok minimum age lowered to 13</title><link>https://maple.ai/privacy-timeline#2024-12-20-grok-minimum-age-13</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2024-12-20-grok-minimum-age-13</guid><pubDate>Fri, 20 Dec 2024 00:00:00 GMT</pubDate><category>Policy changes</category><description>The minimum age changed from 18 to 13, and the service is not directed at children under 13. Source: https://x.ai/legal/privacy-policy</description></item>
<item><title>X: X lets third parties train AI on data</title><link>https://maple.ai/privacy-timeline#2024-11-15-x-third-party-ai-training</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2024-11-15-x-third-party-ai-training</guid><pubDate>Fri, 15 Nov 2024 00:00:00 GMT</pubDate><category>Policy changes</category><description>Privacy policy update: third parties receiving X data may use it for their own purposes, including training their AI models. Source: https://x.com/en/privacy/previous/version_21</description></item>
<item><title>xAI: Grok interaction data added to training</title><link>https://maple.ai/privacy-timeline#2024-11-11-grok-interaction-data-training</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2024-11-11-grok-interaction-data-training</guid><pubDate>Mon, 11 Nov 2024 00:00:00 GMT</pubDate><category>Policy changes</category><description>Interaction data, such as session frequency and features used, is listed among data used to train models. Source: https://x.ai/legal/privacy-policy</description></item>
<item><title>OpenAI: Temporary chats kept up to 30 days</title><link>https://maple.ai/privacy-timeline#2024-11-04-chatgpt-temporary-chats-30-days</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2024-11-04-chatgpt-temporary-chats-30-days</guid><pubDate>Mon, 04 Nov 2024 00:00:00 GMT</pubDate><category>Policy changes</category><description>Temporary chats do not appear in history and are kept for up to 30 days for safety purposes. Source: https://openai.com/policies/eu-privacy-policy/</description></item>
<item><title>LinkedIn: LinkedIn uses member data for generative AI</title><link>https://maple.ai/privacy-timeline#2024-09-18-linkedin-generative-ai-training</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2024-09-18-linkedin-generative-ai-training</guid><pubDate>Wed, 18 Sep 2024 00:00:00 GMT</pubDate><category>Policy changes</category><description>Privacy policy update: member data trains LinkedIn&apos;s content-generating AI models, with an opt-out setting; the EEA, Switzerland and UK were excluded. Source: https://www.linkedin.com/blog/member/trust-and-safety/updates-to-our-terms-of-service-2024</description></item>
<item><title>xAI: User content may train Grok models</title><link>https://maple.ai/privacy-timeline#2024-09-05-grok-user-content-training</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2024-09-05-grok-user-content-training</guid><pubDate>Thu, 05 Sep 2024 00:00:00 GMT</pubDate><category>Policy changes</category><description>User content provided to the service may be processed to train and improve the models, with an email opt-out. Source: https://x.ai/legal/privacy-policy</description></item>
<item><title>European Union: EU AI Act enters into force</title><link>https://maple.ai/privacy-timeline#2024-08-01-eu-ai-act-in-force</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2024-08-01-eu-ai-act-in-force</guid><pubDate>Thu, 01 Aug 2024 00:00:00 GMT</pubDate><category>Regulation</category><description>The Artificial Intelligence Act entered into force, setting risk-based rules for AI systems that apply in stages over the following years. Source: https://commission.europa.eu/news-and-media/news/ai-act-enters-force-2024-08-01_en</description></item>
<item><title>Microsoft: Privacy statement says data may train models</title><link>https://maple.ai/privacy-timeline#2024-08-01-microsoft-ai-training-statement</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2024-08-01-microsoft-ai-training-statement</guid><category>Policy changes</category><description>August 2024: The privacy statement says Microsoft may use personal data to develop and train its AI models. Source: https://www.microsoft.com/en-us/privacy/updates</description></item>
<item><title>Meta: Meta plans AI training on Europeans&apos; posts</title><link>https://maple.ai/privacy-timeline#2024-06-10-meta-eu-ai-training-plan</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2024-06-10-meta-eu-ai-training-plan</guid><pubDate>Mon, 10 Jun 2024 00:00:00 GMT</pubDate><category>Policy changes</category><description>Newsroom post: Meta&apos;s AI models would be trained on public posts, comments and photos from adult users in Europe, with an objection form. Source: https://about.fb.com/news/2024/06/building-ai-technology-for-europeans-in-a-transparent-and-responsible-way/</description></item>
<item><title>Anthropic: Deleted Claude chats removed within 30 days</title><link>https://maple.ai/privacy-timeline#2024-06-05-claude-deleted-chats-30-days</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2024-06-05-claude-deleted-chats-30-days</guid><pubDate>Wed, 05 Jun 2024 00:00:00 GMT</pubDate><category>Policy changes</category><description>Deleted conversations are removed from history immediately and deleted from back-end systems within 30 days. Source: https://www.anthropic.com/legal/archive/612ca587-3729-4908-aee5-65fc654dd483</description></item>
<item><title>Hugging Face: Hugging Face detects access to Spaces secrets</title><link>https://maple.ai/privacy-timeline#2024-05-31-hugging-face-spaces-secrets</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2024-05-31-hugging-face-spaces-secrets</guid><pubDate>Fri, 31 May 2024 00:00:00 GMT</pubDate><category>Breaches and leaks</category><description>Unauthorized access to secrets stored in the Spaces AI app platform was detected; affected tokens were revoked, and users and data protection authorities notified. Source: https://huggingface.co/blog/space-secrets-disclosure</description></item>
<item><title>Kaiser Permanente: Kaiser tracking pixels sent member data to advertisers</title><link>https://maple.ai/privacy-timeline#2024-04-12-kaiser-tracking-pixels</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2024-04-12-kaiser-tracking-pixels</guid><pubDate>Fri, 12 Apr 2024 00:00:00 GMT</pubDate><category>Breaches and leaks</category><description>Members were notified that tracking pixels on Kaiser&apos;s sites and apps may have sent names, IP addresses, and health searches to Google, Bing, and X. Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-583875</description></item>
<item><title>xAI: Grok training covers public posts and chats</title><link>https://maple.ai/privacy-timeline#2024-03-15-grok-public-posts-training</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2024-03-15-grok-public-posts-training</guid><pubDate>Fri, 15 Mar 2024 00:00:00 GMT</pubDate><category>Policy changes</category><description>Training may use public X posts, internet search data, and a voluntary subset of conversation and feedback data. Source: https://x.ai/legal/privacy-policy</description></item>
<item><title>Anthropic: Claude chats excluded from training by default</title><link>https://maple.ai/privacy-timeline#2024-03-04-claude-no-training-by-default</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2024-03-04-claude-no-training-by-default</guid><pubDate>Mon, 04 Mar 2024 00:00:00 GMT</pubDate><category>Policy changes</category><description>Inputs and outputs are not used to train models unless a chat is safety-flagged, reported, or the user opts in. Source: https://www.anthropic.com/legal/archive/cf9213dc-642f-43ff-bb0b-f07e10eb0d9f</description></item>
<item><title>OpenAI: Business admins can access ChatGPT accounts</title><link>https://maple.ai/privacy-timeline#2023-11-14-chatgpt-business-admin-access</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2023-11-14-chatgpt-business-admin-access</guid><pubDate>Tue, 14 Nov 2023 00:00:00 GMT</pubDate><category>Policy changes</category><description>Enterprise or business-account administrators may access and control an account, and users can share conversations by link. Source: https://openai.com/policies/eu-privacy-policy/</description></item>
<item><title>xAI: Early policy trains only on chosen data</title><link>https://maple.ai/privacy-timeline#2023-11-04-xai-chosen-data-training</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2023-11-04-xai-chosen-data-training</guid><pubDate>Sat, 04 Nov 2023 00:00:00 GMT</pubDate><category>Policy changes</category><description>Models are trained only on usage data people choose to provide, not on account, payment, or technical data. Source: https://x.ai/legal/privacy-policy</description></item>
<item><title>23andMe: 23andMe accounts accessed via credential stuffing</title><link>https://maple.ai/privacy-timeline#2023-10-06-23andme-credential-stuffing</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2023-10-06-23andme-credential-stuffing</guid><pubDate>Fri, 06 Oct 2023 00:00:00 GMT</pubDate><category>Breaches and leaks</category><description>Attackers used reused passwords to access about 14,000 accounts, reaching data from about 5.5 million DNA Relatives and 1.4 million Family Tree profiles. Source: https://www.23andme.org/blog/articles/addressing-data-security-concerns</description></item>
<item><title>X: X privacy policy adds AI model training</title><link>https://maple.ai/privacy-timeline#2023-09-29-x-privacy-policy-ai-training</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2023-09-29-x-privacy-policy-ai-training</guid><pubDate>Fri, 29 Sep 2023 00:00:00 GMT</pubDate><category>Policy changes</category><description>Privacy policy update: the information X collects and publicly available information may be used to help train its machine learning or AI models. Source: https://x.com/en/privacy/previous/version_20</description></item>
<item><title>Microsoft: AI research token exposed internal Microsoft data</title><link>https://maple.ai/privacy-timeline#2023-09-18-microsoft-sas-token-exposure</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2023-09-18-microsoft-sas-token-exposure</guid><pubDate>Mon, 18 Sep 2023 00:00:00 GMT</pubDate><category>Breaches and leaks</category><description>An employee published a storage link with a broad-access SAS token on GitHub, exposing two former employees&apos; workstation backups and internal Teams messages. Source: https://www.microsoft.com/en-us/msrc/blog/2023/09/microsoft-mitigated-exposure-of-internal-information-in-a-storage-account-due-to-overly-permissive-sas-token</description></item>
<item><title>Microsoft: Bing Chat activity can be viewed and managed</title><link>https://maple.ai/privacy-timeline#2023-08-01-bing-chat-activity-controls</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2023-08-01-bing-chat-activity-controls</guid><category>Policy changes</category><description>August 2023: The Bing section explains how to view and manage recent activity with Bing Chat. Source: https://www.microsoft.com/en-us/privacy/updates</description></item>
<item><title>Google: Google policy covers public data for AI training</title><link>https://maple.ai/privacy-timeline#2023-07-01-google-policy-ai-training</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2023-07-01-google-policy-ai-training</guid><pubDate>Sat, 01 Jul 2023 00:00:00 GMT</pubDate><category>Policy changes</category><description>Privacy policy update: wording changed from training &quot;language models&quot; on publicly available information to training &quot;Google&apos;s AI models,&quot; naming Bard and Cloud AI. Source: https://policies.google.com/privacy/archive/20230701?hl=en-US</description></item>
<item><title>Amazon: FTC and DOJ charge Amazon over Alexa recordings</title><link>https://maple.ai/privacy-timeline#2023-05-31-ftc-doj-amazon-alexa</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2023-05-31-ftc-doj-amazon-alexa</guid><pubDate>Wed, 31 May 2023 00:00:00 GMT</pubDate><category>Regulation</category><description>The FTC and DOJ alleged Amazon kept children&apos;s Alexa voice recordings indefinitely; a proposed order required a $25 million civil penalty and data deletion. Source: https://www.ftc.gov/news-events/news/press-releases/2023/05/ftc-doj-charge-amazon-violating-childrens-privacy-law-keeping-kids-alexa-voice-recordings-forever</description></item>
<item><title>OpenAI: Turning off chat history stops model training</title><link>https://maple.ai/privacy-timeline#2023-04-25-chatgpt-history-off-no-training</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2023-04-25-chatgpt-history-off-no-training</guid><pubDate>Tue, 25 Apr 2023 00:00:00 GMT</pubDate><category>Policy changes</category><description>Conversations started with chat history off are not used to train models and are kept 30 days for abuse review. Source: https://openai.com/blog/new-ways-to-manage-your-data-in-chatgpt</description></item>
<item><title>OpenAI: Italy temporarily limits ChatGPT data processing</title><link>https://maple.ai/privacy-timeline#2023-03-31-garante-chatgpt-limitation</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2023-03-31-garante-chatgpt-limitation</guid><pubDate>Fri, 31 Mar 2023 00:00:00 GMT</pubDate><category>Regulation</category><description>Italy&apos;s Garante ordered an immediate temporary limitation on OpenAI&apos;s processing of Italian users&apos; data and opened an inquiry into ChatGPT. Source: https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/9870847</description></item>
<item><title>OpenAI: ChatGPT bug showed other users&apos; chat titles</title><link>https://maple.ai/privacy-timeline#2023-03-24-chatgpt-redis-bug</link><guid isPermaLink="true">https://maple.ai/privacy-timeline#2023-03-24-chatgpt-redis-bug</guid><pubDate>Fri, 24 Mar 2023 00:00:00 GMT</pubDate><category>Breaches and leaks</category><description>A Redis library bug let some ChatGPT users see other users&apos; chat titles and exposed payment details of 1.2% of active Plus subscribers. Source: https://openai.com/index/march-20-chatgpt-outage/</description></item></channel></rss>