3 ms·

Really glad this article is so high up because we should be talking primarily about regulating Data and not "Algorithms" or "Compute" when it comes to governi

Really glad this article is so high up because we should be talking *primarily* about regulating Data and not "Algorithms" or "Compute" when it comes to governing "AI." If commoncrawl didn't exist, there would be no ChatGPT If ImageNet didn't exist there would be no Tensorflow etc... Go look at it, all of the value, the actual information, the vectors, matrices, and weights and hyperparameters...all are derived from a single source: Large scale concatenated tables of data. This isn't your daddy's GOFAI - this is only possible because of internet scale data that is relatively trivial to access and simple to transform. I've read calls for regulating (or bombing (wtf?!)) GPU clusters to prevent skynet from happening and it's all very misguided and shows how little is understood about how AI systems are actually built. We should be regulating and managing DATA collection, DATA processing, DATA privacy etc... all of the other parts including the hardware and math will be obsolete or replaced totally over the next decade, but you still need observation of human behavior in some form. Norbert Wiener told us all this in 1950. That process of computationally observing humans - aka metrics, monitoring etc... that comprises the global surveillance economy, should be the thing regulated. All the other problems stem from that. The fact that surveillance capitalism underpins literally TRILLIONS of dollars and the entirety of modern society tells me that data collection/processing regulation at the scale required is going to be difficult at best.

achenet 3y ago
https://gdpr-info.eu/ https://gdpr-info.eu/ regulation around data already exists, and there will likely be more coming in the future :) In fact, I recall seeing an article about OpenAI and Microsoft having to pay a large fine for some illegal data scraping practices or similar, but I'm unable to re-find it.
- AndrewKemendo 3y ago
  GDPR is OK, but has so many holes in it that it is almost worthless in terms of actual enforcement
zmjjmz 3y ago
I'm curious if you feel strongly about the 'open internet' as well, i.e. that platforms and content should be publicly available by default (as opposed to e.g. Elon's recent move to restrict the viewability of tweets by not logged in users). To me, these datasets don't come from some nefarious violation of privacy (surveillance) on the people who've written or otherwise authored their content, but from an aggregation of public content that was previously uncontroversial. If these data were pulled from private content, it would be a different story - although I'm sure that many companies TOS allows the use of your 'private' content to train their models. Going forward I wonder if we may see an 'AI opt-out' for your data regulated (I'm not sure if the new EU act stipulates this)
- AndrewKemendo 3y ago
  All personal data collection should be opt-in only So if you have data on someone that is attributable to their person, then the only legal way to store that is with the approval and consent of the individual who created it for the explicit and narrow purposes the data is being used for. So for example if you use any personal data for scoring in recommendation systems, then that specific use case must be agreed to by the user. If you use personal data to cluster people into affinity groups that are then shown different content than other groups, that explicit use case must be agreed to by the user. etc... The enforcement mechanism is simple: Attributable personal data that is found to be stored without consent must be: 1. Immediately deleted 2. All previous revenues derived from the data will be transferred to the user in question That rule + enforcement mechanism should put concrete boots on everyone collecting data.

Really glad this article is so high up because we should be talking *primarily* about regulating Data and not "Algorithms" or "Compute" when it comes to governi

achenet 3y ago

https://gdpr-info.eu/ https://gdpr-info.eu/ regulation around data already exists, and there will likely be more coming in the future :) In fact, I recall seeing an article about OpenAI and Microsoft having to pay a large fine for some illegal data scraping practices or similar, but I'm unable to re-find it.

AndrewKemendo 3y ago
GDPR is OK, but has so many holes in it that it is almost worthless in terms of actual enforcement

zmjjmz 3y ago

I'm curious if you feel strongly about the 'open internet' as well, i.e. that platforms and content should be publicly available by default (as opposed to e.g. Elon's recent move to restrict the viewability of tweets by not logged in users). To me, these datasets don't come from some nefarious violation of privacy (surveillance) on the people who've written or otherwise authored their content, but from an aggregation of public content that was previously uncontroversial. If these data were pulled from private content, it would be a different story - although I'm sure that many companies TOS allows the use of your 'private' content to train their models. Going forward I wonder if we may see an 'AI opt-out' for your data regulated (I'm not sure if the new EU act stipulates this)

AndrewKemendo 3y ago
All personal data collection should be opt-in only So if you have data on someone that is attributable to their person, then the only legal way to store that is with the approval and consent of the individual who created it for the explicit and narrow purposes the data is being used for. So for example if you use any personal data for scoring in recommendation systems, then that specific use case must be agreed to by the user. If you use personal data to cluster people into affinity groups that are then shown different content than other groups, that explicit use case must be agreed to by the user. etc... The enforcement mechanism is simple: Attributable personal data that is found to be stored without consent must be: 1. Immediately deleted 2. All previous revenues derived from the data will be transferred to the user in question That rule + enforcement mechanism should put concrete boots on everyone collecting data.