Post by @wordshaper@weatherishappening.network

2026-02-25 20:22 UTC

@briankrebs I am also really curious how many people have aggressively violated various privacy laws by feeding stuff into various LLMs for "summary" and "analysis". Frankly it should be a much larger compliance nightmare than it is. (Or, I suppose, it *is* a ginormous compliance nightmare and just right now everyone's thinking it isn't. Incorrectly)

Replies (4)

@Em0nM4stodon@infosec.exchange 2026-02-25 21:29

@wordshaper @briankrebs This 👆

Open ##1597653
@dr_a@mastodon.social 2026-02-25 21:37

@wordshaper @briankrebs this is why i try to buy the drinks for our legal team. they care about privacy, and care at their wit's end.

Open ##1597654
@dct@mastodon.online 2026-02-27 22:56

@wordshaper @briankrebs What I'm seeing in US corporate circles is sort of what you would expect - focus on liability reduction rather than solutions because it's too early for solutions and they're too caught up in FOMO to say no. They buy a small number of vendor-supported AI tools with legal agreements that claim to keep all user data inside the purchased tenant, establish policy that all employees must use the purchased solutions, and block the rest at the proxy server.

Open ##1597656
@gme@bofh.social 2026-02-25 20:27

@wordshaper@weatherishappening.network @briankrebs@infosec.exchange It took Enron to happen before we got Sarbanes-Oxley. Data privacy will have its Enron moment eventually.

Open ##2232334