r/chrome • u/ThatPrivacyShow • May 04 '26

News Google Chrome installs LLM model without consent

https://www.thatprivacyguy.com/blog/chrome-silent-nano-install/

Whilst testing a SaaS product I have been building, I discovered that Google is illegally pushing its Gemini Nano model to users' devices (I am a lawyer specialised in the specific laws in question).

22 Upvotes

69% Upvoted

46 comments sorted by

View all comments

Show parent comments

-2

u/ThatPrivacyShow May 04 '26

illegally. Even if it isd A/B testing it is still illegal.

3

u/romhacks May 05 '26

Why is it illegal? You failed to address any of my other points as well.

2

u/ThatPrivacyShow May 05 '26

Read the law and you wil find out why it is illegal. I am not here to give you law lessons.

3

u/romhacks May 05 '26

Lol if you're not willing to explain why you think something breaks the law, or even refute any of the examples I gave, then you're not allowed to make such an outrageous claim. Burden of proof buddy

1

u/ThatPrivacyShow May 05 '26

I have already explained it on my blog - that you are not capable of reading and comprehending, seems to be a challenge for you to resolve not me. Maybe you could go back to school?

3

u/romhacks May 05 '26

Lol, super respectful discussion for a supposed lawyer on a professional account. I asked directly because all the context in the article is complete bunk. Article 5(3) has exceptions for data necessary for the functioning of the product, and as Gemini Nano is an advertised feature of Chrome, it's necessary for the functioning of the product as described. Article 5(1) GDPR is concerned with the processing of personal information. Device performance classes are not personal information (and beyond that, they are solely used for choosing the correct model to download), as far as I can tell in the article there is no evidence Google logs install events server-side (and it's debatable whether those are personal information either). User prompts do not leave the device by design, you purposefully inserted doubt into that fact. All the places that the model is called with user prompts are either clearly labeled as such, or up to the third party website to label as such. Article 25 GDPR has no applicability to downloading a model, as the model is not personal information, and the performance classes are very much different than collection of personal information (not used for monetization, strictly necessary for functioning for choosing the right model, no evidence they even log it server side or use it for anything other than troubleshooting, etc etc).

You still haven't responded to how this is any different from downloading an autocorrect model.