Global AI framework signed to safeguard human rights

The UK has become one of the first signatories of an international treaty designed to regulate AI and prevent its misuse. This legally binding agreement, drafted by the Council of Europe and signed by countries including the EU, US, and Israel, mandates safeguards to protect human rights, democracy, and the rule of law from potential AI threats. Governments are expected to tackle risks such as AI-generated misinformation and the use of biassed data in decision-making processes.

The treaty outlines several key principles, including ensuring data protection, non-discrimination, and the responsible development of AI. Both public and private sector AI users will be required to assess the impact of AI systems on human rights and provide transparency to the public. Individuals will also have the right to challenge AI-made decisions and file complaints with relevant authorities, ensuring accountability and fairness in AI applications.

In the UK, the government is reviewing how to implement the treaty’s provisions within existing legal frameworks, such as human rights laws. A consultation on a new AI bill is underway, which could further strengthen these safeguards. Once ratified, the treaty will allow authorities to impose sanctions, including bans on certain AI uses, like systems utilising facial recognition from unauthorised data sources.

India introduces draft rules to enhance telecommunications cybersecurity

The Indian government has introduced significant draft rules on telecommunications cybersecurity, marking a substantial advancement in the regulatory framework for telecommunications. Central to these rules is the government’s authority to request traffic data from telecom providers, aimed at enhancing cybersecurity and protecting users from online fraud, particularly concerning over-the-top (OTT) services like WhatsApp and Telegram. By monitoring this data, the government seeks to identify patterns and potential threats, thereby strengthening the security of telecom networks.

Telecom companies in India must adopt comprehensive cybersecurity policies, conduct regular audits, and establish Security Operations Centers (SOCs) for real-time incident monitoring and response. Additionally, they must appoint a Chief Telecommunication Security Officer (CTSO) to ensure compliance and report any security incidents to the government within six hours. This proactive approach facilitates swift government intervention, and bolsters network resilience against cyber threats.

The draft rules also provide a framework for lawful interception of communications and temporary suspension of services for national security or public order reasons, emphasising the balance between security and individual privacy rights. Currently open for public consultation for 30 days, these rules invite feedback from stakeholders to ensure a balanced and inclusive regulatory approach.

Furthermore, the draft rules stress the protection of critical telecom infrastructure, requiring detailed record-keeping and compliance with national security directives, including the registration of telecommunications equipment identifiers.

Meta complies with Brazil’s data protection demands

Meta Platforms, the parent company of Facebook and Instagram, announced on Tuesday that it will inform Brazilian users about how their data is utilised to train generative AI. Meta’s step has been caused by the pressure from Brazil’s National Data Protection Authority (ANPD), which had previously suspended Meta’s new privacy policy due to concerns over using personal data for AI training.

Starting this week, Meta users in Brazil will receive email and social media notifications, providing details on how their data might be used for AI development. Users will also have the option to opt out of this data usage. The ANPD had initially halted Meta’s privacy policy in July, but it lifted the suspension last Friday after Meta agreed to make these disclosures.

In response to the ANPD’s concerns, Meta had also temporarily suspended using generative AI tools in Brazil, including popular AI-generated stickers on WhatsApp, a platform with a significant user base. This suspension was enacted while Meta engaged in discussions with the ANPD to address the agency’s concerns.

Despite the ANPD lifting the suspension, Meta has yet to confirm whether it will immediately reinstate the AI tools in Brazil. When asked, the company reiterated that the suspension was initially a measure taken during ongoing talks with the data protection authority.

The development marks an important step in Brazil’s efforts to ensure transparency and user control over personal data in the age of AI.

TRAI and Google to enhance user security and combat spam in India

The Telecom Regulatory Authority of India (TRAI) and Google have introduced new regulations to enhance user security and reduce spam. These changes are particularly significant for mobile users in India, focusing on improving the safety of online transactions and the quality of applications available for download. By implementing these measures, TRAI and Google are taking proactive steps to safeguard digital interactions, ensuring users can navigate their smartphones with greater confidence and security.

A key component of this initiative is TRAI’s new directive to combat spam calls and fraudulent messages. That regulation requires telecom operators to block unregistered numbers immediately, which is intended to protect users from scams. However, this measure may delay receiving one-time passwords (OTPs) during online transactions, as institutions like banks must register and allow their numbers to continue sending OTPs without interruption. While this could cause minor inconveniences, it is a crucial step toward preventing fraudulent activities and enhancing overall security for users.

In conjunction with TRAI’s efforts, Google has ramped up its policies to remove low-quality and potentially harmful apps from its Play Store. The following initiative aims to mitigate risks associated with malware and ensure that only trustworthy applications are accessible to users. By eliminating these problematic apps, Google creates a safer environment for users to download and use applications without compromising their personal information. The crackdown on low-quality apps is expected to significantly reduce the risk of malware, providing a more secure digital experience for all users.

Halliburton confirms data stolen in August cyberattack

Halliburton, a US oilfield services company, revealed that its systems were breached by an unauthorised third party in an August cyberattack. The company acknowledged that data was accessed and removed but stated that the incident is not expected to impact its operations significantly. Halliburton has not disclosed the specific nature of the stolen data or the costs related to the breach.

In response to the attack, Halliburton activated its cybersecurity response plan and launched an investigation with the help of external advisors to assess the damage and prevent further unauthorised activity. The breach caused disruptions and limited access to some of the company’s business applications. This incident highlights ongoing cybersecurity challenges faced by US energy firms, which multiple cyberattacks have targeted in recent years.

AI news anchors protect journalists in Venezuela amidst government crackdown

An unusual pair of news anchors in Venezuela has emerged—El Pana and La Chama. These AI-generated figures, designed to look and sound realistic, are the creation of Connectas, a Colombia-based organisation. The ‘Operation Retweet’ initiative aims to disseminate news from several independent Venezuelan media outlets while protecting journalists from government repression. The project’s director, Carlos Huertas, explained that using AI allows them to bypass the escalating risks real reporters face in the country.

Why does it matter?

The Venezuelan government has been cracking down on journalists, protesters, and opposition figures amid a disputed election, with at least ten journalists arrested since mid-June, eight of whom remain imprisoned on severe charges. The crackdown is part of a broader effort to stifle dissent in response to the ongoing election dispute between President Nicolas Maduro and opposition candidate Edmundo Gonzalez. While Maduro, who has been in power since 2013, claims victory with the backing of the Supreme Court and electoral authority, the opposition argues that their candidate won by a large margin.

Protests over the election have resulted in 27 deaths and over 2,400 arrests. The situation has drawn international concern, with many questioning the election’s fairness and calling for the release of full vote tallies. Despite the government’s efforts to suppress dissent, the AI news anchors symbolise creative resistance, delivering news without putting human reporters at further risk.

Lavrov blames Durov’s ‘freedom’ for Telegram CEO’s arrest

Russian Foreign Minister Sergei Lavrov commented on the recent arrest of Pavel Durov, the founder of Telegram, in France, claiming that Durov’s ‘too free’ approach to running the social media platform led to his downfall. Durov, a Russian-born tech entrepreneur, was placed under formal investigation by a French judge last week for alleged complicity in facilitating illicit activities on Telegram, including child sex abuse images, drug trafficking, and fraud. Durov’s lawyer dismissed the charges as ‘absurd,’ arguing that he cannot be held accountable for crimes committed by users on the app, which boasts nearly a billion users globally and is especially popular in Russia and other former Soviet states.

Lavrov, speaking to students at MGIMO University in Moscow, suggested that the investigation is part of a broader Western effort to control Russia, reflecting the Kremlin’s stance. He remarked that Durov did not heed Western advice on moderating his platform, which has been a source of friction with authorities. Despite years of pressure from Russia on Durov and his tech ventures, the country has rallied behind him after his arrest.

Kremlin spokesman Dmitry Peskov emphasised that there have yet to be any negotiations between the Kremlin and Durov, who also holds French and UAE passports. He expressed concern that the situation in France might evolve into political persecution despite French President Emmanuel Macron’s denial of any political motives behind Durov’s detention. Lavrov further noted that Durov’s arrest, the first of a major tech CEO, has further strained relations between Moscow and Paris, marking a new low point in their diplomatic ties.

Pavel Durov, a transgressor or a fighter for free speech and privacy?

It has not been that long since Elon Musk was hardly criticised by the British government for spreading extremist content and advocating for the freedom of speech on his platform. This freedom of speech has probably become a luxury few people can afford, especially on platforms whose owners are less committed to those principles while trying to comply with the requirements of governments worldwide. The British riots, where individuals were allegedly arrested for social media posts, further illustrate the complexity of regulating social media digital policies. While governments and like-minded people may argue that these actions are necessary to curb violent extremism and exacerbation of critical situations, others see them as a dangerous encroachment and undermining of free speech. 

The line between expressing controversial opinions and inciting violence or allowing crime on social media platforms is often blurred, and the consequences of crossing it can be severe. However, let us look at a situation where someone is arrested for allegedly turning a blind eye to organised crime activities on his platform, as in the case of Telegram’s CEO. 

Namely, Pavel Durov, Telegram’s founder and CEO, became another symbol of resistance against government control over digital communications alongside Elon Musk. His arrest in Paris on 25 August 2024 sparked a global debate on the fine line between freedom of speech and the responsibilities that come with running a platform that allows for uncensored, encrypted communication. French authorities allegedly detained Durov based on an arrest warrant related to his involvement in a preliminary investigation and his unwillingness to grant authorities access to his encrypted messaging app, which has over 1 billion users worldwide. The investigation concerns Telegram’s alleged role in enabling a wide range of crimes due to insufficient moderation and lack of cooperation with law enforcement. The charges against him—allegations of enabling criminal activities such as child exploitation, drug trafficking, terrorism, and fraud, as well as refusing to cooperate with authorities —are severe. However, they also raise critical questions about the extent to which a platform owner can or should be held accountable for the actions of its users.

Durov’s journey from Russia to France highlights the complex interplay between tech entrepreneurship and state control. He first made his mark in Russia, founding VKontakte, a platform that quickly became a refuge for political dissenters. His refusal to comply with Kremlin demands to hand over user data and sell the platform eventually forced him out of the country in 2014. Meanwhile, Durov launched Telegram in 2013, a messaging app focused on privacy and encryption, which has since become a tool for those seeking to avoid government surveillance. However, his commitment to privacy has put him at odds with various governments, leading to a life of constant movement across borders to evade legal and political challenges.

In France, Durov’s initially promising relationship with the government soured over time. Invited by President Emmanuel Macron in 2018 to consider moving Telegram to Paris, Durov even accepted French citizenship in 2021. However, the French government’s growing concerns about Telegram’s role in facilitating illegal activities, from terrorism to drug trafficking, led to increased scrutiny. The tension as we already know, culminated in Durov’s recent detention, which is part of a broader investigation into whether platforms like Telegram enable online criminality.

Durov’s relationship with the United Arab Emirates adds another layer of complexity. After leaving Russia, Durov based Telegram in the UAE, where he was granted citizenship and received significant financial backing. However, the UAE’s restrictive political environment and stringent digital controls have made this partnership a delicate one, with Durov carefully navigating the country’s security concerns while maintaining Telegram’s operations.

The USA, too, has exerted pressure on Durov. Despite repeated attempts by US authorities to enlist his cooperation in controlling Telegram, Durov has steadfastly resisted, reinforcing his reputation as a staunch defender of digital freedom. He recently told to Tucker Carlson in an interview that the FBI approached a Telegram engineer, attempting to secretly hire him to install a backdoor that would allow US intelligence agencies to spy on users. However, his refusal to collaborate with the FBI has only heightened his standing as a symbol of resistance against governmental overreach in the digital realm.

With such an intriguing biography of his controversial tech entrepreneurship, Durov’s arrest indeed gives us reasons for speculation. At the same time, it seems not just a simple legal dispute but a symbol of the growing diplomatic and legal tensions between governments and tech platforms over control of cyberspaces. His journey from Russia to his current predicament in France highlights a broader issue: the universal challenge of balancing free expression with national security. 

Accordingly, Telegram, based in Dubai and widely used across Russia and the former Soviet Union, has faced scrutiny for its role in disseminating unfiltered content, especially during the Russia-Ukraine conflict. Durov, who left Russia in 2014 after refusing to comply with government demands, has consistently maintained that Telegram is a neutral platform committed to user privacy and free speech. Additionally, his multiple citizenships, including Russian (since the devolution in 1991, previously the Soviet Union from birth), Saint Kitts and Nevis (since 2013), French (since 2021), and UAE (since 2021), are only escalating tenseness between concerned governments pressing on French President Emmanuel Macron and asking for clarifications on the matter. Even Elon Musk confronted Emanuel Macron by responding directly to his post on X, claiming that ‘It would be helpful to the global public to understand more details about why he was arrested’, as he described it as an attack on free speech.

Despite the unclear circumstances and vague official evidence justifying the arrest and court process, Durov will undoubtedly face the probe and confront the accusations under the prescribed laws concerning the case. Therefore, it would be preferable to look at the relevant laws and clarify which legal measures are coherent with the case. 

The legal backdrop to Durov’s arrest is complex, involving both US and EU laws that govern digital platforms. However, Section 230 of the US Communications Decency Act of 1996, often called the ‘twenty-six words that created the internet,’ is the governing law that should be consulted and under which, among others, this case would be conducted. The law, in its essence, protects online platforms from liability for user-generated content as long as they act in good faith to remove unlawful material. This legal shield has allowed platforms like Telegram to flourish, offering robust encryption and a promise of privacy that appeals to millions of users worldwide. However, this immunity is not absolute. Section 230 does not protect against federal criminal liability, which means that if Telegram is found to have knowingly allowed illegal activities to increase without taking adequate steps to curb them, Durov could indeed be held liable.

In the EU context, the recently implemented Digital Services Act (DSA) imposes stricter obligations on digital platforms, particularly those with significant user bases. Although Telegram, with its 41 million users in the EU, falls short of the ‘very large online platforms’ (VLOP) category that would subject it to the most stringent DSA requirements, it would probably still be obligated to act against illegal content. The DSA emphasises transparency, accountability, and cooperation with law enforcement—a framework that contrasts sharply with Telegram’s ethos of privacy and minimal interference.

 Performer, Person, Solo Performance, Adult, Male, Man, Head, Face, Happy, Pavel Durov

The case also invites comparisons with other tech moguls who have faced similar dilemmas. Elon Musk’s acquisition of Twitter, now rebranded as X, has been marked by his advocacy for free speech. However, even Musk has had to navigate the treacherous waters of content moderation, facing governments’ pressure to combat disinformation and extremist content on his platform. The last example is the dispute with Brazil’s Supreme Court, where Elon Musk’s social media platform X could be easily ordered to shut down in Brazil due to alleged misinformation and extremist content concerning the case that was spread on X. The conflict has deepened tensions between Musk and Supreme Court Judge Alexandre de Moraes, whom Musk accused of engaging in censorship.

Similarly, Mark Zuckerberg’s Meta has been embroiled in controversies over its role in child exploitation, but especially in spreading harmful content, from political misinformation to hate speech. On the other hand, Zuckerberg’s recent confession in an official letter that, in 2021, the White House and other Biden administration officials exerted considerable pressure on Meta to suppress certain COVID-19-related content, including humour and satire, adds fuel to the fire concerning the abuse of legal measures to stifle freedom of speech and excessive content moderation by government officials. Nevertheless, both Musk and Zuckerberg have had to strike a balance between maintaining a platform that allows for open dialogue and complying with legal requirements to prevent the spread of harmful content.

The story of Chris Pavlovski, CEO of Rumble, further complicates this narrative. His decision to leave the EU following Durov’s arrest underscores the growing unease among tech leaders about the increasing regulatory pressures of the EU. Pavlovski’s departure can be seen as a preemptive move to avoid the legal and financial risks of operating in a jurisdiction that tightens its grip on digital platforms. It also reflects a broader trend of tech companies seeking more favourable regulatory environments, often at the expense of user rights and freedoms.

All these controversial examples bring us to the heart of this debate: where to draw the line between free speech and harm prevention. Encrypted platforms like Telegram offer unparalleled privacy but pose significant challenges for law enforcement. The potential for these platforms to be used by criminals and extremists cannot be ignored. However, the solution is more complex. Overzealous regulation risks stifling free expression and driving users to even more secretive and unregulated corners of the internet.

Pavel Durov’s case is a microcosm of the larger global struggle over digital rights. It forces us to confront uncomfortable questions: Do platforms like Telegram have a responsibility to monitor and control the content shared by their users, even at the cost of privacy? Should governments have the power to compel these platforms to act, or does this represent an unacceptable intrusion into the private sphere? Should social media companies that monetise content on their platforms be held responsible for the content they allow? And ultimately, how do we find the balance in the digital world we live in to optimally combine privacy and security in our society? 

These questions will only become more pressing as we watch Durov’s and similar legal cases unfold. The outcome of his case could set a precedent that shapes the future of digital communication, influencing not just Telegram but all platforms that value user privacy and free speech. Either way, Durov’s case also highlights the inherent conflict between cyberspace and real space. There was once a concept that the online world—the domain of bits, bytes, and endless data streams—existed apart from the physical reality we live in. In the early days of the internet, this virtual space seemed like an expansive, unregulated frontier where the laws of the physical world did not necessarily apply. However, cyberspace was never a separate entity; rather, it was an extension, a layer added to the world we already knew. Therefore, the concept of punishment in the digital world has always been, and still is, rooted in the physical world. Those held responsible for crimes or who commit crimes online are not confined to a virtual jail; they are subject to controversies in the real world and legal systems, courts, and prisons.

The Indian Department of Telecom proposes new interception rules

The Department of Telecom (DoT) in India has proposed significant changes to the rules governing lawful interception of messages through the draft Telecommunications, Procedures and Safeguards for Lawful Interception of Messages, Rules, 2024. A key change is the elimination of penalties for telecom entities that violate interception norms, including fines and suspension of licenses related to confidentiality. This shift raises concerns about compliance and accountability within the industry.

Additionally, the new rules exempt demonstrations and testing of interception systems by the central government from regulatory scrutiny, allowing telecom entities to facilitate these activities without penalty. However, the DoT emphasises the need for robust internal safeguards, mandating that telecom operators implement effective measures to prevent unauthorised interceptions and maintain confidentiality.

The process for issuing interception orders remains largely unchanged, with orders still issued by the union or state home secretary or, in urgent cases, by a joint secretary or Inspector General of Police. Any order must be confirmed by the competent authority within seven working days, ensuring oversight and accountability.

The draft rules also stipulate that interception records must be destroyed every six months unless needed for functional purposes, with specific orders requiring destruction within two months after interception. Moreover, review committees at both the central and state levels will meet bi-monthly to evaluate the validity of interception orders, promoting transparency and oversight.

Tech industry needs new ethical guidelines, says Facebook whistleblower

Frances Haugen, the former Facebook whistle-blower, urged the tech industry to adopt new ethical guidelines to address growing concerns over privacy and safety in the digital world. Speaking at the DataGrail Summit, she compared the moral drift of tech companies to the navigational challenges faced by sailors in the 16th and 17th centuries, arguing that today’s intangible economy requires a modern-day ‘North Star’ to guide its course.

Haugen drew from her experience at Facebook, criticising the company for repeatedly choosing profits over user well-being in decisions around content moderation. She highlighted the need for greater transparency in social media platforms, pointing out that many need measurable safety metrics, unlike car manufacturers who face independent safety testing. Without such measures, tech companies can avoid ethical practices without consequences.

She also criticised Meta’s decision to shut down its transparency tool CrowdTangle and warned of tech companies’ resistance to scrutiny. Haugen suggested that a lack of transparency is at the heart of the tech industry’s issues, with companies only being held accountable for financial performance rather than their impact on users. She called for greater corporate responsibility in light of increasing data privacy laws.

Lawsuits against Meta by over 40 states regarding harm to children are a significant step towards better regulation, Haugen noted and could lead to further legislative change. She called for collaboration within the industry to ensure innovation proceeds safely and responsibly, allowing technology to have a positive impact without compromising user safety.