The European Commission is ordering Google to share the search data of all Europeans with other companies (AI chatbot makers, search engines, etc.), after a kind of "anonymisation". I tested it on the real Google data, hundreds of billions of search records. I broke it.
3 media files
The report and my summary:
https://blog.lukaszolejnik.com/alone-among-a-thousand-the-european-commissions-anonymisation-of-europeans-google-searches-is-broken/
https://lukaszolejnik.com/reports/alone-in-thousand-final.pdf
Full disclosure. Google commissioned and paid for my work, to which I allocated a lot of time. I had full independence. Google did not interfere with my work.
I raised these risks in April, on the draft of this plan, before I had seen any data: [April link].
https://blog.lukaszolejnik.com/the-european-commission-is-turning-google-search-into-a-privacy-and-national-security-risk/
Now I have measured this on the final version, and real data.
The European Commission is turning Google Search into a privacy and national-security risk
Alone among a thousand: the European Commission's "anonymisation" of Europeans' Google searches is broken