Compliance

Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads

Google's updated privacy policy explicitly ties AI Search and Gemini activity to ad targeting—European enterprises using Workspace should assess GDPR purpose-limitation exposure and tighten AI personalization controls.

Summary written by editorial AI · Source link below

Filed by THN (Feedburner)24 October 20261 min readRead at source ↗

Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the company to serve targeted ads to users based on their activity on other connected Google services.

"You may choose to allow certain Google services, including services like Search or Gemini Apps, to access data from other Google services you use,

Editorial Analysis

Framed for the CISO & Security Leaders desk

Why it matters

Google linking AI-personalized Search and Gemini activity to its ad-targeting apparatus creates new data-flow risks for enterprises whose employees use Google Workspace with personal AI features enabled.

What to do

Review enterprise Google Workspace policies to ensure AI personalization features that could expose business-context data to ad targeting are disabled or restricted.

Board brief

Google will use data from its AI features for ad targeting—this creates GDPR risk for enterprises whose employees use Google services with AI features enabled.

Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.

Continue at the source

Read the full report at THN (Feedburner)

External link — opens at THN (Feedburner) in a new tab.

Continue with

Editorial Analysis

More from the Compliance Desk