Facebook scandal alarms China as AI battle heats up

The scandal over the alleged abuse of Facebook users’ data is unfolding a long way from China, and yet privacy regulators in Beijing have been watching intently.

Their interest shows how all three big players in the technology world — the Americans, Chinese and Europeans — are feeling their way to balance the demands of consumers for privacy and of governments for security.

But they’re also competing to shape the rules of the game for internet companies and, for the United States and China in particular, to maximise access to data for a bigger goal: to dominate artificial intelligence (AI), the next frontier in machine learning.

“All of these governments and companies are in the middle of trying to figure out what data governance should look like,” said Samm Sacks, senior fellow in the technology programme at the Center for Strategic and International Studies, a Washington think tank. “And this is happening in a global context that will have implications for trade and for research and development in AI.”

New Chinese privacy standards take effect on May 1. The sweeping General Data Protection Regulation enters force in the European Union just over three weeks later.

Now the prospect of tighter data privacy legislation in the US has just got a little closer. Facebook chief executive officer Mark Zuckerberg is preparing to testify to Congress on how Cambridge Analytica, a company that worked on Donald Trump’s 2016 presidential election campaign, secured the data of 50 million Facebook users. That news helped to send tech stocks tumbling in the US and China two weeks ago.

“This Facebook incident sounded the alarm for Chinese data regulators and controllers,” said Lu Chuanying, a cyber-security researcher at the Shanghai Institute for International Studies who helped draft the new data privacy standard for China’s tech companies.

“If that’s a problem for the largest social network platform in the US, then that can be a problem for Chinese companies,” as they wrestle with potential responsibility for third-party data abuse, he said.

AI has exploded in recent years as ever more datasets become available to be mined by algorithms.

From robotics, to language and image recognition, to heath care and military applications, many expect AI to drive future economic growth and define great power competition. As Russian President Vladimir Putin put it last year: “The one who becomes the leader in this sphere will be the ruler of the world.”

Chinese President Xi Jinping has set out an ambitious plan to dominate in AI by 2030, overtaking the US. His plan calls for gross output from China’s AI industry increase tenfold within the next three years, to 150 billion renminbi (US$24 billion), and to 1 trillion renminbi by 2030.

Lu said that vision plays a part in drafting regulation. He described the stringency of China’s current data-privacy rules as falling deliberately somewhere between the US and the EU. That’s partly because of competitive concerns over access to big data.

The US government’s goal is to maintain its global lead in AI development. The EU, which has no big data-collecting corporations on the scale of Facebook, Amazon or the Chinese giant Tencent, wants to lead in the ethical use of data. It too, though, is beginning to worry about getting left behind on AI.

A new study by Jeffrey Ding for the Future of Humanity Institute at Oxford University found that China currently trails the US in AI capabilities by most meaurements, though not on access to big data or the supercomputers to crunch it.

That’s the result of heavy government investment, a 1.4-billion-strong population, higher e-commerce saturation and intrusive government databases that would be politically difficult to maintain in the West.

China is trying to manage access to online information and restrict data exports while legislating for greater privacy rights for consumers in the commercial sector. The tension between those goals is reflected in China’s privacy legislation, said Richard Bird, a Hong Kong-based partner in the law firm Freshfields Bruckhaus Deringer.

Though in some ways at least as strict as the EU’s, China’s new privacy standard is non-binding, he said. Meanwhile, the most developed measures to protect personal privacy are, tellingly, in the National Cyber Security law.

Adopted last year, it required companies to store and process locally all personal data as well as any other data that China considers “important”. The US filed a complaint with the World Trade Organization that such a vaguely worded restriction will be used to discriminate against foreign companies.

Chinese tech companies have issues with the Cyber Security law, too. The government wants commercial internet champions such as Alibaba, Baidu and Tencent to expand abroad, adding a digital plank to its Belt and Road strategy of building infrastructure around the world to expand China’s trade links and influence.

Those same companies have been “pushing back on data localisation because they see it potentially hurting them globally”, said Sacks, the US analyst.

Alibaba, for example, might not be able to serve its Chinese customers abroad. Chinese financial institutions could be hobbled by domestic bureaucracy as they try to make international transactions. The tech companies also want clearer privacy regulation to help win the trust of the foreign governments and consumers they need to expand abroad, according to Sacks.

In any case, the whole focus on big data as the new oil — the essential ingredient for a new, AI-based post-industrial economy — may be overdone, according to Paula Parpart, the founder of Brainpool. ai, a UK-based search firm specialising in high-level AI engineers.

One reason, she said, is that progress is being made in data analysis that strips out the identity of individuals — something known as differential privacy.

Another is that what most people call AI is in reality machine learning, using the brute force of big data to perform tasks. True AI requires coming up with algorithms that, like humans, can learn from just one or two examples, rather than thousands. More privacy regulation could force research in that direction.

Bloomberg

“This Facebook incident sounded the alarm for Chinese data regulators and controllers. If that’s a problem for the largest social network platform in the US, then that can be a problem for Chinese companies” LU CHUANYING Shanghai Institute for International Studies