Lawmakers warn Google could expose Spirit Airlines data in $10 million AI training deal
US lawmakers flagged that Google's proposed $10M deal to acquire Spirit Airlines' internal data — covering 100M emails and 500M Teams messages — for AI training could expose employee PII, a scenario with direct GDPR parallels for European enterprises considering similar data monetisation.
Summary written by editorial AI · Source link below
The proposed sale would include about 100 million emails, 500 million Microsoft Teams messages, employment contracts, employee and timecard records and payroll and tax information, Rep. Steven Horsford (D-NV) said in a press release.
Editorial Analysis
Monetising internal corporate data for AI training without robust privacy safeguards could trigger regulatory enforcement under GDPR; European firms must ensure any such arrangements respect data-subject rights.
Review any data-sharing or AI-training agreements to ensure employee and customer PII is excluded or properly anonymised in compliance with GDPR.
A proposed deal to sell corporate communications for AI training highlights the regulatory risks of treating internal data as a sellable asset.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at The Record in a new tab.
More from the Compliance Desk
- Medical services company settles with 4 states over 2023 hack of sensitive patient records3d
- 3 Frameworks to Protect CISOs & Orgs Against AI Liability27 Oct
- Developing Security Metrics for Automated Compliance Checking26 Oct
- Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads24 Oct
- 23andMe successor settles with California for $6 million over cybersecurity failings20 Oct