Microsoft recently announced updates to its data handling policy for interactions with Bing’s ChatGPT feature, set to take effect on September 30, 2023. These changes are aimed at preventing misuse while raising concerns about user privacy and data security.
The policy updates, which were first introduced on July 30, 2023, include stricter measures to prevent misuse of Bing AI features, such as the Notebook feature, which can support up to 16,000 characters of various content, including research documents.
One of the key changes in the updated policy is the restriction on users from using Bing AI to answer queries about the underlying models, algorithms, and systems that power it. Additionally, the policy strictly prohibits any attempts to collect data from Bing’s ChatGPT for the purpose of creating, training, or improving other AI-powered models.
The update comes in response to previous incidents where users, including security expert Kevin Liu, were able to trick the chatbot into revealing sensitive information or performing unauthorized actions. Microsoft’s revised terms of service demonstrate the company’s commitment to protecting the technology behind Bing with ChatGPT from potential exploitation.
The new guidelines suggest that Microsoft may now collect and store both user inputs and the system’s responses to monitor and prevent misuse. However, details about the duration for which user data will be retained are still unclear.
Interestingly, enterprise users of Bing’s ChatGPT are exempt from the standard data retention policy, indicating a customized approach to AI services for different user groups. This move reflects Microsoft’s strategy to provide businesses with a more secure and privacy-focused environment for using chatbot technology.
Overall, the updated policies represent a significant shift in Microsoft’s approach to data privacy and security in interactions with AI tools like ChatGPT. The company’s efforts not only strengthen controls around Bing’s ChatGPT but also highlight its commitment to balancing user privacy and security in the digital age.