KI und WordPress WP Meetup Hamburg #140

Chapter 6

Every connection you make is a risk you make

The measure is not what the AI does today. It is what it could do.

  • What counts is what a system is capable of — not what you happened to type.
  • Phoning the tradesman, or handing him the key: that is the difference.
  • Customer data involved? Then a data processing agreement under Article 28 GDPR.
  • The line runs between consumer and business plans, not between free and paid.
  • And every new connection is also a new way in.
  • Then the jurisdiction question: a US provider, a European alternative, or a model on your own machine.

Contracts first, then the plug. Not the other way round.

"We didn't expose anything yet" isn't a privacy policy argument. Privacy policies are about what a system is capable of doing with data and who can access it, not just your prompting.