The rapid advancements in artificial intelligence (AI) technologies, particularly in generative AI, have underscored the urgent need for regulatory frameworks that address data protection and cybersecurity. As the European Union moves forward with its AI Act, countries like Trkiye are also beginning to recognize the importance of establishing guidelines to safeguard personal data in the context of AI applications. The recent Generative Artificial Intelligence Guideline published by Trkiye’s Personal Data Protection Authority (DPA) serves as a crucial step in this direction, emphasizing the ethical and legal considerations that must be taken into account.

Recent research has unveiled a significant encryption flaw in popular AI chatbots, raising concerns about the security of user conversations. Cybersecurity experts at Microsoft have identified a vulnerability in the architecture of large language models (LLMs) that could allow hackers to intercept messages, bypassing the encryption designed to keep chats private. This flaw, known as the Whisper Leak, highlights the potential risks associated with the growing reliance on generative AI systems.