Google Chrome has been quietly installing a 4GB AI model called Gemini Nano on users' devices without explicit consent, sparking concerns over privacy and data protection. This move, as flagged by security researcher Alexander Hanff, raises questions about the ethical implications of such practices and the potential legal consequences, particularly in Europe. The model, designed to perform tasks like scam detection and text summarization, is installed automatically on eligible devices running recent versions of Chrome, often without users' knowledge. The installation process lacks a consent screen, pop-up, or straightforward setting to prevent it, leaving users unaware until they discover the file. The AI model's presence on devices highlights the ongoing debate around on-device generative AI models and their potential benefits and drawbacks. While Google claims the model will uninstall if the device lacks sufficient resources, the lack of transparency and user control raises concerns about data privacy and security. The installation of Gemini Nano without explicit consent could be seen as a breach of the European Union's General Data Protection Regulation (GDPR), which emphasizes principles of lawfulness, fairness, and transparency. Additionally, the environmental implications of running AI models on personal devices are worth considering, as they contribute to the overall carbon footprint of AI usage. The incident underscores the importance of user consent and transparency in AI deployment, especially as the technology becomes more integrated into everyday devices. As users, it is crucial to be vigilant and take proactive steps to protect our data and privacy, such as regularly checking for and removing unnecessary files, as outlined in the provided instructions. The installation of Gemini Nano on Chrome browsers serves as a reminder of the ongoing challenges in balancing technological advancements with user privacy and security.
