Lawmakers want to ban AI companies from selling your health data
Lawmakers want to ban AI companies from selling your health data
立法者拟禁止人工智能公司出售您的健康数据
A revamped data privacy bill would limit selling information to data brokers, including from chatbot services. 一项经过修订的数据隐私法案将限制向数据经纪人出售信息，其中包括来自聊天机器人服务的信息。
A new proposal would ban the sale of Americans’ health and location information to data brokers — including information people reveal to an AI chatbot like ChatGPT or Claude. 一项新的提案将禁止向数据经纪人出售美国人的健康和位置信息，这包括人们向 ChatGPT 或 Claude 等人工智能聊天机器人透露的信息。
In the coming weeks, Senator Elizabeth Warren (D-MA) and Representative Mary Gay Scanlon (D-PA) are planning to debut a new version of the Health and Location Data Protection Act that’s better suited to the AI era. The former version of the bill, first introduced in June 2022, prohibited data brokers from collecting and selling health and location data. Four years later, it’s expanded to ban other companies from selling such data to brokers, and to specifically cover data entered into AI systems. 在接下来的几周内，参议员伊丽莎白·沃伦（民主党，马萨诸塞州）和众议员玛丽·盖伊·斯坎隆（民主党，宾夕法尼亚州）计划推出新版本的《健康与位置数据保护法》，该法案将更适应人工智能时代。该法案的旧版本于 2022 年 6 月首次提出，旨在禁止数据经纪人收集和出售健康及位置数据。四年后，该法案进行了扩展，禁止其他公司向经纪人出售此类数据，并明确涵盖了输入人工智能系统的数据。
AI labs have set their sights on building health and medical products. In January, Elon Musk publicly called for people to upload their medical records, like MRI scans, to Grok, xAI’s chatbot. That same month, OpenAI introduced ChatGPT Health, a sandboxed tab within ChatGPT that it deemed more secure, and encouraged users to upload their medical records and other sensitive information. It also introduced ChatGPT for Healthcare, aimed at medical providers. A few days after that, Anthropic quickly followed up with Claude for Healthcare, a “HIPAA-ready” tool for individuals, health providers, and hospitals. 人工智能实验室已将目光投向了健康和医疗产品的开发。今年 1 月，埃隆·马斯克公开呼吁人们将核磁共振扫描等医疗记录上传到 xAI 的聊天机器人 Grok 上。同月，OpenAI 推出了 ChatGPT Health，这是一个其认为更安全的 ChatGPT 沙盒标签页，并鼓励用户上传医疗记录和其他敏感信息。该公司还推出了面向医疗服务提供商的“医疗版 ChatGPT”（ChatGPT for Healthcare）。几天后，Anthropic 迅速跟进，推出了 Claude for Healthcare，这是一款面向个人、医疗服务提供商和医院的“符合 HIPAA 标准”的工具。
But when battling data breaches or unauthorized access to data, users are largely at the AI companies’ mercy. The data protection for tools like OpenAI’s and Anthropic’s “largely depends on what companies promise in their privacy policies and terms of use,” Sara Gerke, a law professor at the University of Illinois Urbana-Champaign, told The Verge in January. The US lacks an overall federal framework for data privacy, despite years of attempts. 然而，在应对数据泄露或未经授权的数据访问时，用户很大程度上只能任由人工智能公司摆布。伊利诺伊大学厄巴纳-香槟分校法学教授萨拉·格尔克（Sara Gerke）在 1 月份接受《The Verge》采访时表示，OpenAI 和 Anthropic 等工具的数据保护“很大程度上取决于公司在隐私政策和使用条款中的承诺”。尽管经过多年的努力，美国目前仍缺乏一个全面的联邦数据隐私框架。
This bill — which is also sponsored by Senators Ron Wyden (D-OR) and Bernie Sanders (I-VT) — would require the Federal Trade Commission to enact the rules within 180 days and will allow the FTC, state attorneys general, and affected individuals to sue to enforce it. It would also earmark $1 billion to the FTC over the next 10 years for enforcement. 该法案由参议员罗恩·怀登（民主党，俄勒冈州）和伯尼·桑德斯（独立党，佛蒙特州）共同发起，要求联邦贸易委员会（FTC）在 180 天内制定相关规则，并允许 FTC、州检察长和受影响的个人提起诉讼以强制执行。该法案还将在未来 10 年内为 FTC 拨出 10 亿美元的执法经费。
“It’s more important than ever that we crack down on data brokers that are raking in giant profits from selling Americans’ most sensitive information,” said Senator Warren in a statement. “Especially as more people enter their private health data into AI, we need to make sure that information isn’t exploited by the highest bidder.” “我们比以往任何时候都更需要打击那些通过出售美国人最敏感信息而获取巨额利润的数据经纪人，”沃伦参议员在一份声明中表示，“特别是随着越来越多的人将私人健康数据输入人工智能，我们需要确保这些信息不会被出价最高者所利用。”