What happened?
Slack, a cloud-based team communication platform, has been found using users' data and information to train its AI tools without explicit consent. The company's users were automatically opted into this arrangement without their permission. The company was caught when Duckbill Group executive Corey Quinn expressed anger over the lack of clarity in Slack's privacy policies in a post on X, which Slack responded to by agreeing that customer content is used to train AI tools, but the data is not going towards their premium offering. Many argue that the company should have provided a clear warning and allowed users to opt-out before data collection began. Slack's opt-out process is also problematic, as people cannot opt-out independently but require the organization’s admin to request to opt-out by sending an email with a specific subject line to a particular email ID.
What was said?
In his post, Corey Quinn pointed to Slack’s Privacy Principles, which read, “To develop AI/ML models, our systems analyze Customer Data (e.g., messages, content, and files) submitted to Slack as well as Other Information (including usage information) as defined in our Privacy Policy and in your customer agreement,” to emphasize how Slack uses its customer data. Slack’s response to this indicated a breach in its promise to its users: “Work without worry. Your data is your data. We don’t use it to train Slack AI. Everything runs on Slack’s secure infrastructure, meeting the same compliance standards as Slack itself.”
See also: HIPAA Compliant Email: The Definitive Guide
In the know
Explicit consent refers to an unambiguous agreement towards a particular action or arrangement, made by an individual who is fully aware and comprehends the nature of their approval. This form of consent demonstrates a precise resolution based on well-informed decisions, which are often communicated through explicit language or gestures. There may be instances where written evidence is necessary to eliminate any possible uncertainty surrounding such agreements.
See also: Patient consent: What you need to know
Why it matters
AI technologies have the potential to revolutionize industries by analyzing vast amounts of data, enhancing decision-making processes, and providing personalized services. However, this capability comes with significant risks to individual privacy and data security. Before using its customer data, Slack was supposed to obtain consent from the users after telling them how their data would be used. Slack’s use of its customer data without obtaining consent violates users' data privacy rights and breaks the trust users may have in the company.
See also: Artificial Intelligence in healthcare
FAQs
What is Slack?
Slack is a widely used collaboration platform designed to streamline communication and enhance teamwork within organizations. It offers various features such as instant messaging, file sharing, and integrated tools for project management, allowing teams to communicate effectively and efficiently.
What are the data privacy rights?
Data privacy rights are the fundamental rights individuals have over their personal information, ensuring that their data is handled responsibly, ethically, and securely by organizations. These rights are enshrined in various laws and regulations worldwide, such as the European Union's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
Tshedimoso Makhene
