Meta’s AI Image Generator Raises GDPR Privacy Concerns
Meta has introduced a new AI image generator called Muse Image, which allows users to create pictures by referencing public Instagram profiles. This feature uses faces and images from public social media posts to generate new photos. However, this has raised concerns among privacy advocates because Instagram users are not notified when their images are used in this way. By default, photos from public accounts can be included in the AI’s training and generation process unless users take action to opt out.
To protect their privacy, Instagram users who do not want their photos to be used by Muse Image can switch their accounts from public to private. This is the most straightforward way to prevent strangers from accessing and using their images as source material. For those wishing to keep their accounts public, Meta has provided an option to opt out. Users can find this setting in the “sharing and reuse” section of Instagram’s settings and toggle off the permission that allows their content to be reused by the AI tool.
Meta stated that the AI system was designed with safety measures from the start. Private accounts and users under the age of 18 are automatically excluded from the image generator’s database. Adult users with public profiles can also opt out easily. Meta also promises to take action against any content generated that violates its community standards. Despite these safeguards, privacy experts argue that requiring users to actively disable the feature is unfair, especially since the opt-out option is not easy to find and the toggle states are visually similar, increasing the risk of accidental consent.
Concerns extend beyond adult users to children who may appear in photos on public accounts. Meta has not clarified whether children depicted in these images are protected from being used in AI-generated content. Privacy advocates warn that children’s faces could be appropriated without consent. The debate highlights the need for clearer rules on AI use of personal data, especially in the European Union where the General Data Protection Regulation (GDPR) emphasizes user consent and data protection. Users are advised to monitor their account settings closely and consider privacy implications carefully.
