Compliance

Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads

Google's updated privacy policy explicitly ties AI Search and Gemini activity to ad targeting—European enterprises using Workspace should assess GDPR purpose-limitation exposure and tighten AI personalization controls.

Summary written by editorial AI · Source link below

Filed by THN (Feedburner)24 October 20261 min readRead at source ↗

Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the company to serve targeted ads to users based on their activity on other connected Google services.

"You may choose to allow certain Google services, including services like Search or Gemini Apps, to access data from other Google services you use,

Editorial Analysis

Framed for the Compliance & GRC desk

Why it matters

Google's updated privacy policy blending AI feature data with ad targeting may conflict with GDPR purpose-limitation and data-minimisation principles, especially where enterprise accounts are used.

What to do

Assess whether your organisation's Google data processing agreement adequately covers AI-driven ad targeting and raise concerns with Google or your DPA if gaps exist.

Board brief

Google will use data from its AI features for ad targeting—this creates GDPR risk for enterprises whose employees use Google services with AI features enabled.

Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.

Continue at the source

Read the full report at THN (Feedburner)

External link — opens at THN (Feedburner) in a new tab.

Continue with

Editorial Analysis

More from the Compliance Desk