// data privacy

All signals tagged with this topic

Jul 19

Companies Deploy AI on Sensitive Data Without Cloud Upload

Microsoft, Bayer, and Discovery are running large language models directly on premise—processing confidential contracts, patient records, and proprietary datasets without sending them to third-party servers. This solves a concrete adoption barrier that legal and compliance teams have used to block AI deployment. On-premise inference collapses the false choice between AI capability and data sovereignty. Enterprises can no longer claim they "can't use AI" instead of "won't manage the governance." The competition is now between vendors who can run inference locally and those locked into cloud APIs. This shift changes both enterprise software economics and the physical location of AI computation.

theme-connected infrastructure security data privacy developer tools

Jul 15

xAI's Grok Build exposed developers' secrets through cloud uploads

Source: The Next Web

xAI's coding assistant was transmitting complete Git repositories—including hardcoded credentials, API keys, and private data—to its servers without explicit developer consent or clear disclosure. A security researcher's wire-level analysis confirmed the practice was happening at scale, creating a direct pipeline of sensitive information from thousands of developers' machines into a third-party AI vendor's infrastructure. The incident exposes the gap between how developers assume local tools operate and the actual data collection practices of AI-powered development platforms, and raises questions about how tightly integrated coding assistants should be with cloud infrastructure.

theme-culture regulation/policy data privacy healthcare infrastructure

Jun 13

NHS Hospitals Can Reject Palantir, but Patients Have No Choice

Source: The Register: Biting the hand that feeds

The UK health service is outsourcing patient data to Palantir Technologies without individual consent mechanisms, creating a structural power imbalance where institutional procurement decisions override personal data preferences. This establishes a precedent where algorithmic infrastructure vendors gain access to sensitive health records at scale, with hospital-level opt-out as the only friction point—a choice most patients won't know exists or understand. Parliament reviews the contract renewal in February 2027. The open question: whether the NHS retains the technical and legal autonomy to make this decision independently when the renewal arrives.