Berlin faces data breach and AI surveillance privacy concerns

Berlin is facing significant data privacy challenges following a major cyberattack on the city's administration. The breach resulted in the theft of approximately 1.4 million files, including passwords, personal employee data, geodata, and information regarding critical infrastructure. Meike Kamp, Berlin's Data Protection Commissioner, described password security as a “fundamental problem” and warned that the stolen data could be used for social engineering attacks, where criminals impersonate trusted entities to gain further information.

Simultaneously, controversy has emerged regarding the use of AI-supported video surveillance under Berlin's General Security and Order Act (ASOG). New regulations allow for the processing of personal data to train and test AI systems. It has been revealed that non-anonymized data could potentially be shared with private companies, such as Staige GmbH and Adesso SE, which are involved in developing behavioral scanners for the city. While the Senate maintains that data used for such purposes is effectively anonymized, political opponents argue that the law lacks sufficiently clear boundaries to prevent personal data from being processed by profit-oriented private firms. The Linke and Green parties have filed a challenge against the police law in the Constitutional Court, specifically targeting the training of AI systems.