Artificial intelligence has become central to how the internet operates — and how your personal data is collected, analysed, and used. From the ads you see to the content algorithms feed you, AI processes vast amounts of personal information at a scale and speed that would have been unimaginable a decade ago. Understanding how this affects your privacy is the first step to doing something about it.
How AI Has Changed Data Collection
Traditional data collection was relatively straightforward: websites logged what pages you visited, forms collected what you typed, and cookies tracked your sessions. Valuable, but limited.
Modern AI-powered data collection goes much further:
- Behavioural analysis: AI models can infer your age, income bracket, political views, health conditions, and emotional state from your browsing patterns — without you ever explicitly providing that information.
- Cross-device tracking: AI links your phone, laptop, tablet, and smart TV activity into a single profile by recognising shared patterns, even when different browsers or accounts are used.
- Voice and image recognition: Smart speakers, phone assistants, and security cameras feed audio and visual data into AI systems that can identify individuals, track movements, and infer activities.
- Natural language processing: When you type queries into search engines, chat with customer service bots, or use AI assistants, those conversations are often stored and used to improve models — and potentially to profile you.
AI-Powered Surveillance
Beyond commercial data collection, AI has dramatically expanded the capabilities of surveillance systems:
Facial Recognition
Facial recognition technology can now identify individuals in real-time from CCTV footage with high accuracy. In the UK, police forces have trialled live facial recognition at public events and in high streets. While regulation exists, its use is expanding — and private companies use similar technology in retail environments to detect shoplifters or track repeat visitors.
Predictive Profiling
AI systems can analyse patterns in your data to predict future behaviour — what you're likely to buy, how you might vote, or even whether you're at risk of certain health conditions. Insurers, employers, and law enforcement agencies are increasingly interested in these capabilities.
Social Media Monitoring
Everything you post publicly is potentially being scraped, analysed, and stored by AI systems — not just the platforms themselves, but third-party data brokers and researchers. Information you consider casual or throwaway can contribute to detailed profiles.
The AI Tools You Use Every Day
Many people now regularly use AI assistants like ChatGPT, Google Gemini, and Microsoft Copilot. These tools raise specific privacy questions:
- Conversation storage: Most AI services store your conversations by default and use them to improve their models. Check the privacy settings and data retention policies of any AI tool you use.
- Sensitive inputs: Avoid sharing personal information, medical details, financial data, or confidential work information with AI assistants unless you fully understand how that data will be stored and used.
- Opt-out options: Many services allow you to opt out of having your data used for training. This is usually buried in settings — it's worth finding and enabling.
How Data Brokers Use AI
Data brokers are companies whose entire business model is collecting, aggregating, and selling personal data. AI has made their operations far more powerful — capable of combining data from hundreds of sources to build extraordinarily detailed profiles on individuals.
These profiles can include your name, address history, family members, income estimate, purchasing history, health indicators (inferred from buying patterns), political leanings, and much more — all compiled without your knowledge or consent.
In the UK and EU, GDPR gives you rights over this data — including the right to request deletion. However, exercising these rights requires identifying which data brokers hold your data and submitting individual requests to each one, which is time-consuming.
AI and Your IP Address
Your IP address plays a specific role in AI-driven tracking. It's one of the most reliable signals available without cookies or logins, making it a key input for:
- Fraud detection systems that flag unusual IP locations
- Advertising networks that target ads based on location derived from IP
- Bot detection systems that block automated traffic
- Audience analytics that estimate demographics from IP geolocation data
Masking your IP with a VPN reduces the signal available to these systems — though AI has become sophisticated enough that IP address is just one of many signals used for identification.
Practical Steps to Protect Your Privacy from AI
You can't opt out of AI entirely, but you can meaningfully reduce the data available for it to use:
- Use a VPN: Hides your real IP address from websites and trackers, reducing location-based profiling.
- Block trackers: Install uBlock Origin in your browser to prevent advertising networks from following you across sites.
- Use privacy-respecting services: Search with DuckDuckGo instead of Google. Use Signal instead of standard SMS. Use a private email provider like Proton Mail for sensitive communications.
- Review AI tool settings: Disable conversation history and training data contributions in services like ChatGPT and Google's AI products.
- Be selective on social media: The less public information you share, the less material AI systems have to work with.
- Use private browsing thoughtfully: Private/incognito mode stops local history, but doesn't block tracking at the network level. A VPN is more effective for that.
- Request data deletion: Under GDPR, UK residents can request that companies delete personal data they hold. This applies to data brokers too, though it requires effort.
The Regulatory Landscape
Governments are beginning to catch up with AI privacy concerns. The EU's AI Act, which came into force in 2024, places restrictions on high-risk AI applications and bans certain uses like real-time biometric surveillance in public spaces (with some exceptions). The UK is developing its own AI governance framework, though the approach differs from the EU's.
GDPR remains the most powerful tool available to UK and EU residents for exercising control over personal data — including data processed by AI systems.
Frequently Asked Questions
Can AI identify me even if I use a VPN?
Potentially, yes — through browser fingerprinting, login data, and behavioural patterns. A VPN hides your IP address but doesn't prevent fingerprinting or identification through your accounts. Combining a VPN with tracker blocking and logged-out browsing significantly reduces your trackable footprint.
Does GDPR protect me from AI data processing?
Yes, to a meaningful degree. GDPR requires lawful bases for processing personal data, grants rights of access and deletion, and restricts automated decision-making that has significant effects on individuals. However, enforcement varies and exercising your rights requires proactive action on your part.
Are AI chatbots safe to use for personal questions?
For general questions, yes. For sensitive personal, medical, financial, or legal matters, be cautious about what you share. Assume that inputs may be stored and reviewed. Don't enter information you wouldn't want appearing in a data breach.