We've all seen films where highly-intelligent robots attempt to conquer Earth, with humans fighting to prevent their own extinction.  These narratives usually end with human intelligence prevailing, or both species coexisting, the suggestion often being that human qualities will prevail over artificial intelligence (AI).

 

In reality, AI has gained considerable momentum in recent years, particularly with tools like ChatGPT.  At the Olympic Games held in Paris this year, AI played a crucial role in the diving events by breaking down dives into sequences and analysing rotations, speeds, angles, and other factors in less than a tenth of a second.

 

AI typically requires substantial data input to properly analyse and generate content.  By collecting diverse data, AI systems can enhance their knowledge on specific subjects with each analysis.  This is often achieved by large corporations utilising user data to train their AI systems, as exemplified by companies like Microsoft.

 

In September, LinkedIn (owned by Microsoft) updated its privacy policy to permit the use of users’ personal data and content to train AI models for content generation (GenAI).  Hong Kong's Privacy Commissioner for Personal Data (PCPD) expressed concerns about LinkedIn’s update, particularly since users' default consent was set to 'YES', causing alarm in various jurisdictions.  As of 11 October 2024, LinkedIn has suspended the use of Hong Kong users’ data for GenAI training while addressing the PCPD’s concerns.  Additionally, LinkedIn has updated its privacy policy to explain how user information is used to develop GenAI and has introduced an opt-out setting.  Currently, LinkedIn does not train GenAI in Canada, the EU, EEA, UK, Switzerland, Hong Kong, and Mainland China.

 

This issue coincides with a joint statement issued on 29 October 2024 by the PCPD and 15 other global privacy authorities.  This statement, sent to social media platforms and websites hosting publicly-accessible personal data (including Microsoft), updates an initial joint statement from August 2023.  It offers further guidance on implementing dynamic, multi-layered approaches to protect against unlawful data scraping.  The statement encourages entities to collaborate and develop solutions to address this privacy threat.

 

Key Takeaways

 

Although we are already deep into this new technology, there is currently no legislation in Hong Kong specifically governing AI.  In June 2024, the PCPD published the "Artificial Intelligence: Model Personal Data Protection Framework", offering internationally recognised guidance to assist organisations in procuring, implementing, and using AI (including generative AI) while complying with the Personal Data (Privacy) Ordinance.  This framework aims to help organisations harness AI benefits while safeguarding data privacy.  Companies should carefully review this framework if they plan to introduce AI into their operations.

 

Another valuable resource is the EU's AI Act, the world’s first comprehensive AI regulation, which came into force on 1 August 2024.  It is expected to serve as a template for jurisdictions planning similar legislation, alongside a landmark AI treaty designed to align AI systems with democratic values globally.  It remains to be seen whether the Hong Kong Government will incorporate these provisions into future legislation - at present it is adopting a context-based approach rather than a comprehensive regime.  It may prefer to look to the PRC model - the Mainland is in the process of rolling out its own targeted regulations on AI.

 

As the use of personal data for training AI models becomes more widespread, businesses and individuals will need to be increasingly mindful of the terms and conditions of the services they use, to understand how their data is being analysed and to make informed decisions about its use.

 

Given the speed with which AI is developing, those responsible for drafting laws to govern it are likely to struggle to deal with everything it is capable of - we are now in an era where science fiction has become reality. If, as seems likely, we will see machine intelligence that is also capable of truly independent thought, and even emotions, it will likely require an increasingly sophisticated legal framework.  AI may acquire rights and protections, or we may shift towards a more restrictive regime, aimed at limiting AI from challenging our dominance as a species.

 

 

關於本行

 

何韋律師行是一所領先、提供全方位服務的香港律師事務所。本行提供的法律服務結合律師的深厚經驗和遠見。

我們的主要業務領域包括：企業／商業事務及企業融資；商事及海事爭議解決；醫療疏忽及醫護；保險、人身傷害及專業彌償保險；僱傭；家庭及婚姻；信託資產保值；遺囑、遺囑認證及遺產管理；物業及建築物管理；銀行業務；欺詐行為；不良債務；基金投資；虛擬資產；金融服務／企業監管及合規事宜。

作為一家獨立的律師行，我們能將法律和商業上利益衝突的情況減至最低，為各行各業的客戶處理各種法律事務。本行合夥人在香港發展事業多年，對國際業務及亞洲地區業務有深刻的了解。

 

免責聲明： 本電郵所載資料及任何附件僅提供作就參考用途，並不旨在提供法律意見。如閣下有任何疑問，請電郵至[email protected]。