United Kingdom: Concluded ICO investigation into Snap over "My AI" feature

On 21 May 2024, the Information Commissioner's Office (ICO) concluded the investigation into Snap's approach to assessing the data protection risks of its "My AI" chatbot. The ICO's investigation indicated that Snap's pre-launch risk assessment for "My AI" did not adequately consider the data protection risks, especially concerning children. In a preliminary notice from 6 October 2023, actions the ICO may demand were outlined. Following the investigation, Snap took measures to conduct a more comprehensive risk review of "My AI" and demonstrated to the ICO that it had implemented suitable mitigations. The ICO is now satisfied that Snap has conducted a compliant risk assessment concerning "My AI." Nevertheless, the ICO cautioned the industry to consider data protection risks associated with generative AI before launching such products to the market.