This thinking is the problem. "Oh, we just added your entire private/privileged/NDA/corporate information to our training set without your consent. What's the problem?"
Opt-out must be the default.
Edit: By "Opt-out must be the default." I mean: no one's data must be included until they explicitly give consent via an opt-in :)
But I also know that so many businesses are too sluggish to make a switch and employees incapable of understanding the risk. So unfortunately not all of Europe will switch away. But I hope a significant number gives them the middle finger.
This doesn't mean that I support Slack or any opt-in without consent training model. On the contrary. I don't have any OpenAI/Midjourney/etc. account, and don't plan to have one.
Don't you mean opt-in must be the default?
Or am I misunderstanding the concept of opt-ins :P
Opt-in by default = Opt-out
Opt-out is "I don't agree to have my data included"
The GDPR mandates that consent is given affirmatively, with this kind of "oh we put it in the EULA nobody reads" being explicitly called out as non-compliant.