Lawmakers warn Google could expose Spirit Airlines data in $10 million AI training deal
US lawmakers flagged that Google's proposed $10M deal to acquire Spirit Airlines' internal data — covering 100M emails and 500M Teams messages — for AI training could expose employee PII, a scenario with direct GDPR parallels for European enterprises considering similar data monetisation.
Summary written by editorial AI · Source link below
The proposed sale would include about 100 million emails, 500 million Microsoft Teams messages, employment contracts, employee and timecard records and payroll and tax information, Rep. Steven Horsford (D-NV) said in a press release.
Editorial Analysis
Monetising internal corporate data for AI training without robust privacy safeguards could trigger regulatory enforcement under GDPR; European firms must ensure any such arrangements respect data-subject rights.
Review any data-sharing or AI-training agreements to ensure employee and customer PII is excluded or properly anonymised in compliance with GDPR.
A proposed deal to sell corporate communications for AI training highlights the regulatory risks of treating internal data as a sellable asset.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at The Record in a new tab.
More from the Compliance Desk
- SoK: Failure Modes in Common Criteria Product Evaluation - A Taxonomy and Design-for-Evaluability Guidance9 Oct
- The Amplifier Effect: Human-Factor Risks of AI-Suggested Correlation and Auto-Propagation in Multi-Framework GRC Self-Assessment7 Oct
- IQVIA fined $7.8 million for failing to properly anonymize health data5 Oct
- PrivDev: Mapping Static-Analysis Data Types to DPV5 Oct
- Agents Pick Dependencies, DoWI 8430.01 Holds You Accountable1 Oct