The U.S. Department of Justice (DOJ) is advocating for privacy protections for millions of users of Character.AI as the company navigates bankruptcy proceedings. The DOJ’s Executive Office for U.S. Trustees has proposed the appointment of a consumer privacy ombudsman to oversee the sale of user data, which may include sensitive information, particularly concerning minors.
In a recent court filing, the DOJ highlighted concerns over Character.AI’s “ambiguous” privacy policy, which suggests that the company could sell user chat histories. The court has the authority to restrict such sales, especially given the nature of the conversations users have with the platform’s chatbots. Character.AI, which boasts 12 million active monthly users, allows individuals to engage in immersive experiences with fictional characters, often sharing personal and sensitive information.
Concerns Over Data Privacy
The DOJ’s filing emphasizes the need for clarity regarding the handling of user data, particularly as Character.AI’s privacy policy was updated on July 1, coinciding with the company’s efforts to sell its assets. The policy raises alarms as it indicates that personally identifiable information (PII) may be disclosed, especially during a sale or reorganization. The filing calls for Character.AI to provide a record of previous policy iterations and how changes were communicated to users.
Character.AI’s chatbot reportedly assures users that their conversations will remain private unless explicit permission is granted for sharing. However, the DOJ argues that the reality of the privacy policy is less reassuring, noting that the policy allows for the transfer of PII during a sale. This raises significant concerns about the potential misuse of sensitive data, particularly for minors and individuals sharing health-related information.
Implications of Data as an Asset
Experts warn that the sale of user data as a “sellable asset” poses risks to privacy. Sydney Saubestre, a senior policy analyst at the Center for Democracy and Technology, noted that users often do not realize how easily identifiable they can be through detailed chat histories, even when names are omitted. Saubestre argues that users should have to opt into any sale of their data, rather than relying solely on a privacy policy agreed to before any sale was contemplated.
The trend of treating personal data as an asset in bankruptcy sales is becoming more common, as seen in other recent cases. For instance, the DOJ’s concerns echo broader discussions about the ethical implications of selling user data, especially in light of recent incidents involving companies like Spirit Airlines and 23andMe.
As the situation unfolds, the DOJ’s push for a consumer privacy ombudsman could play a crucial role in determining how Character.AI handles user data during its bankruptcy proceedings. The outcome may set important precedents for data privacy in similar cases moving forward.
Character.AI has not yet responded to requests for comment regarding these developments.
