As the most recent relevant event to your privacy, we thought this warranted special attention…

How Would You Like Your Computer to Track Everything You Do?

Microsoft is planning to release an AI chatbot on June 18, 2024 with a feature called Recall. 

What’s special about this feature?

It’s an AI system designed to enhance your computer usage by learning from your activity. To achieve this, it records and remembers everything you do on your computer, including taking screenshots of your activity for training purposes.

BBC calls it “Chilling” quoting a data and privacy expert Daniel Tozer, that the system reminded him of the dystopian Netflix series Black Mirror. Several Reddit threats like this one and this one have also popped up, with considerable angst and discontent with the feature.

How To Remove Microsoft’s “Recall” Feature

For the time being, disabling the recall feature is possible and straight forward:

  • Settings
  • Privacy & Security
  • Recall & snapshots
  • Turn off “Save snapshots”

In the future, more aggressive techniques such as deleting the executable binary, or preventing the taking of screen snapshots all together might be necessary.

Why Is Microsoft’s “Recall” Important?

The implications of Microsoft’s “Recall” feature extend far beyond mere convenience. Here’s why this development is critically important:

Pervasive Privacy Invasion

“Recall” isn’t just about enhancing user experience; it’s about continuous surveillance. By recording your every move, including screenshots, it opens a gateway for unprecedented data collection. This means your sensitive information – banking details, personal data, passwords, addresses, health records, and even confidential company information – could potentially be monitored and stored.

Uncontrolled Data Exposure

Unlike new AI services such as ChatGPT or Google Gemini, where you choose what information to share, “Recall” operates without user consent on specific data points. This lack of control can lead to unintended exposure of sensitive and private information, raising significant security and privacy concerns.

Potential for Data Misuse

The aggregation of personal and professional data under Microsoft’s control could be exploited. While Microsoft says that the screenshots will remain on your computer, this policy can change. Furthermore, the trained AI models could be stored on the cloud and linked to your profile. Even if Microsoft implements robust security measures, the mere existence this data makes it a juicy target for cyberattacks. The consequences of such breaches could be catastrophic, leading to identity theft, financial loss, and corporate espionage.

Regulatory and Ethical Concerns

The use of “Recall” may conflict with various data protection regulations, such as GDPR in Europe or CCPA in California. Companies need to scrutinize the legal implications of deploying such a feature in their work environments to avoid hefty fines and legal repercussions.

Erosion of Trust

The introduction of “Recall” can severely undermine trust between users and technology providers. This is not good.

Employers Will Likely Use Similar Tools In The Future

We discussed this concept in our article on understanding employer surveillance. Many of your activities on company computers are already being tracked. However, with the integration of AI models that can be trained from your activity, new and more serious concerns about privacy arise.

What Can You Do To Protect Your Privacy

1. Use Personal Devices for Sensitive Activities

Limit your personal activities, such as banking, personal emails, and health-related research, to your personal devices only. Avoid using company computers for anything you wouldn’t want your employer to see.

2. Regularly Review Privacy Settings

Regularly review and adjust privacy settings on company-provided devices. Ensure that features like Microsoft’s “Recall” are disabled if possible.

Additionally, stay informed about new updates or changes in company policy regarding data monitoring and adjust your habits accordingly.

3. Encrypt Sensitive Communication

Utilize encryption tools for sensitive communications and data transfers. Tools like VPNs (Virtual Private Networks) and encrypted email services can help protect the content of your communications from being easily monitored. This adds a layer of security, ensuring that even if your activity is tracked, the content remains confidential.

Conclusion

Protecting your privacy in an era of AI and data collection requires vigilance and proactive measures. 

Use personal devices for sensitive activities, regularly review privacy settings, disable features like “Recall” whenever you can, and encrypt your communications. These steps will help you maintain control over your personal information in the workplace.