Global privacy watchdogs are tightening guidelines to combat data raking

The a new statement based on last year’s guidancewhich offers clearer guidance for social media companies and other website operators. He stressed that publicly available data still needs to be protected by relevant data protection laws and that platforms have an obligation to ensure compliance when using this data in the development of AI and other systems. The statement highlights that organizations must adopt and update various technical and procedural measures to address the rapidly evolving data collection challenge. This includes following lawful processes for any permitted data collection to ensure compliance with strict contractual and regulatory requirements.

Following the 2023 statement, which was sent to major platforms such as YouTube, TikTok, Instagram, Facebook, LinkedIn and X (formerly Twitter), international data protection authorities began discussions with these companies and the Alliance to Prevent Unauthorized Copying. These conversations highlighted the challenges platforms face in countering sophisticated data collection methods and distinguishing between authorized users and scrapers.

The social media companies announced the implementation of various measures outlined in the initial statement. These include integrating platform design features that prevent automatic data collection and using AI-based tools to detect and respond to suspicious activity. They also explored cost-effective solutions to help small businesses meet their security responsibilities.

Despite progress, data collection continues to pose significant challenges. Authorities said illegally collected personal data could be used for cyber attacks, identity theft, unauthorized surveillance and other malicious purposes. The statement urged platforms to remain proactive, regularly review security measures and educate users on how to protect their information through available privacy settings.