The initial inquiry by the ICO indicates that the proprietor of the social media application did not sufficiently assess the risks to users of My AI service
Snapchat faces the potential imposition of a substantial fine in the millions of pounds, following an initial enforcement notice from the UK data regulator. This notice is linked to the alleged failure of Snapchat’s owner to adequately assess the privacy risks associated with its artificial intelligence chatbot, particularly concerning users, including children. The Information Commissioner’s Office (ICO) has tentatively determined that the parent company of the social media app did not appropriately recognize and evaluate the risks to several million UK users of My AI, encompassing those aged 13 to 17. Snapchat, with 21 million monthly active users in the UK, holds a significant presence, especially among younger demographics, where approximately 48% of users are estimated to be 24 years old or younger, and 18% fall within the 12 to 17 age group.
The Information Commissioner, John Edwards, voiced apprehension about the initial findings of the investigation, highlighting Snap (the parent company of Snapchat) for not appropriately acknowledging and assessing privacy risks for children and other users before the introduction of My AI.
The ICO underscored that these investigative results are preliminary, and Snap has until October 27th to offer its insights before a conclusive decision is reached regarding potential actions.
The ICO emphasized that, at this point, no definitive conclusions should be drawn—neither regarding an actual breach of data protection laws nor the issuance of an enforcement notice.
If a conclusive enforcement notice is issued, Snap would be obligated to cease data processing associated with My AI, leading to the suspension of the service for UK customers until the company conducts a thorough risk assessment for the service.
While the ICO’s main goal is to avert potential privacy breaches and ensure compliance with My AI, it also holds the authority to impose a fine of up to 4% of Snap’s global turnover. For the previous year, Snap’s global revenues amounted to $4.6 billion (£3.8 billion), making the potential maximum fine £17.5 million.
My AI relies on OpenAI’s GPT technology, which has been a leading force in the global artificial intelligence landscape. Its implementation marked the inaugural integration of generative AI into a major messaging platform in the UK.
John Edwards commented, “We have consistently emphasized that organizations must weigh both the risks and benefits associated with AI. Today’s preliminary enforcement notice underscores our commitment to taking action to protect the privacy rights of UK consumers.”
Snap initially introduced the My AI feature for Snapchat+ subscribers in February, subsequently extending its availability to the entire user base in April.
A spokesperson from Snap stated, “We are carefully evaluating the ICO’s provisional decision. Similar to the ICO, we are dedicated to preserving the privacy of our users.