4 ms·

> Next up is some kind of GDPR request perhaps? GDPR doesn't preclude anyone from scraping you. In fact, scraping is not illegal in any context (LinkedIn keeps

by dvt 2y ago

> Next up is some kind of GDPR request perhaps? GDPR doesn't preclude anyone from scraping you. In fact, scraping is not illegal in any context (LinkedIn keeps losing lawsuits). Using copyrighted data in training LLMs is a huge grey area, but probably not outright illegal and will take like a decade (if not more) before we'll have legislative clarity.

croes 2y ago
But per GDPR you could enforced your data fo be deleted. If enough people demand it the effort gets too high and costly
- mrweasel 2y ago
  LLMs don't really retain the full data anyway and it "should" be scrapped once the training is done. So yes, technically you might be able to demand that your data is to be removed from the training data, but that's going to be fairly hard to prove that it exists within the model.
- PeterisP 2y ago
  As far as I see, GDPR would not applicable here - GDPR is about control of "your data" as in "personal data about you as a private individual"[1], it is not about "your data" as in "content created or owned by you". [1] GDPR Art 4.1 "‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;"
Findecanor 2y ago
Using copyrighted data in training LLMs is allowed in the European Union, unless the copyright holder specifically opts out. This is in the recent Artificial Intelligence Act, which defines AI training as a type of "data mining" being covered by the EU Directive 2019/790 Article 4. The problem is that there is no designated protocol for opting out. There are a bunch of protocols pushed by different entities, and support is fragmented even where there is intent to do the right thing. This means of course that they don't work in practice. An example: The most well known out-out protocol might be DeviantArt's "noai" and "noimageai" tags that could be in HTTP and/or HTML headers [1]. The web site Cara.app has got a large influx of artists recently because of its anti-AI stance. Cara.app puts only a "noai" metadata tag in HTML headers of pages that link to images but not in any HTTP response headers. Spawning.ai's "datadiligence" library for web crawlers [2] searchers for "noai" tags in HTTP response headers of image files but not in HTML files that link to them. 1. "noai" tag: https://www.deviantart.com/team/journal/UPDATE-All-Deviations-Are-Opted-Out-of-AI-Datasets-934500371 https://www.deviantart.com/team/journal/UPDATE-All-Deviation... 2. "Datadiligence": https://github.com/Spawning-Inc/datadiligence/tree/main https://github.com/Spawning-Inc/datadiligence/tree/main

by dvt 2y ago

croes 2y ago

But per GDPR you could enforced your data fo be deleted. If enough people demand it the effort gets too high and costly

mrweasel 2y ago
LLMs don't really retain the full data anyway and it "should" be scrapped once the training is done. So yes, technically you might be able to demand that your data is to be removed from the training data, but that's going to be fairly hard to prove that it exists within the model.
PeterisP 2y ago
As far as I see, GDPR would not applicable here - GDPR is about control of "your data" as in "personal data about you as a private individual"[1], it is not about "your data" as in "content created or owned by you". [1] GDPR Art 4.1 "‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;"

Findecanor 2y ago

Using copyrighted data in training LLMs is allowed in the European Union, unless the copyright holder specifically opts out. This is in the recent Artificial Intelligence Act, which defines AI training as a type of "data mining" being covered by the EU Directive 2019/790 Article 4. The problem is that there is no designated protocol for opting out. There are a bunch of protocols pushed by different entities, and support is fragmented even where there is intent to do the right thing. This means of course that they don't work in practice. An example: The most well known out-out protocol might be DeviantArt's "noai" and "noimageai" tags that could be in HTTP and/or HTML headers [1]. The web site Cara.app has got a large influx of artists recently because of its anti-AI stance. Cara.app puts only a "noai" metadata tag in HTML headers of pages that link to images but not in any HTTP response headers. Spawning.ai's "datadiligence" library for web crawlers [2] searchers for "noai" tags in HTTP response headers of image files but not in HTML files that link to them. 1. "noai" tag: https://www.deviantart.com/team/journal/UPDATE-All-Deviations-Are-Opted-Out-of-AI-Datasets-934500371 https://www.deviantart.com/team/journal/UPDATE-All-Deviation... 2. "Datadiligence": https://github.com/Spawning-Inc/datadiligence/tree/main https://github.com/Spawning-Inc/datadiligence/tree/main