ChatGPT ve Üretici Yapay Zekâ Modellerinde Mahremiyet ve Güvenliğin Hukuki Boyutu

Year 2023, Volume: 29 Issue: 2, 1003 - 1040, 31.12.2023

Başak Ozan Özparlak Müge Çetin

https://doi.org/10.33433/maruhad.1347497

Abstract

Bu çalışma, ChatGPT gibi üretici yapay zekâ modellerindeki mahremiyet ve güvenliğe dair etkileri hukuki açıdan ele alarak; bu konuda ortaya çıkmaya başlayan sorunları ve olası çözüm yollarını tartışmaktadır. ChatGPT, geniş dil modeli (large language model) yapısına sahip olan ve pekiştirmeli öğrenme (reinforcement learning) esası ile sürekli gelişen bir yapay zekâ tabanlı sohbet botudur. Bu sohbet botu, kullanıcılarla etkileşimde bulunarak farklı görevleri yerine getirebilmektedir. Çalışmamızda; ChatGPT ve genel olarak üretici yapay zekâ modellerinin çalışma ilkeleri ve kullanım potansiyeli açıklanarak, bu teknolojinin halihazırdaki ve gelecekteki mahremiyet ve güvenlik riskleri ortaya konulmaktadır. Bu sorunların yürürlükteki ve tasarı aşamasındaki yasal düzenlemeler ışığında tartışılması ve olası çözümlerin belirlenmesi önemlidir. Çalışmamızın ana argümanı, üretici yapay zekâ modellerinin, mahremiyet ve güvenlik risklerinin önceki teknolojilerden daha faklı olduğu, bu nedenle bu risklerin en aza indirgenmesini sağlamanın sadece teknolojik önlemler ile değil etkili yasal düzenlemelerle mümkün olabileceğidir.

Keywords

üretici yapay zeka, yapay zeka ve hukuk, mahremiyet, siber güvenlik hukuku, veri koruma hukuku, chatGPT

References

• Aggarwal CC, Recommender Systems (Springer, 2016)
• Alpaydın, E, Yapay Öğrenme: Yeni Yapay Zekâ, Aylin Ağar (çev) (Tellekt 2020).
• Alpaydın E, Machine Learning: The New AI (The MIT Press, 2016).
• Altman S, ‘Planning For AGI and Beyond’ (24 Feb 2023) <https://openai.com/blog/planning-for-agi-andbeyond> accessed 05 July 2023.
• Anderljung M, Barnhart J, Korinek A and Leung J, ‘Frontier AI Regulation: Managing Emerging Risks to Public Safety’ (11 Jul 2023) <https://arxiv.org/pdf/2307.03718.pdf> 6, accessed 22 Jul 2023.
• Angioloni L, Borghuis T and Brusci L (2020) ‘Conlon: A pseudo-song generator based on a new pianoroll, wasserstein autoencoders, and optimal interpolations’ (Research Gate, October 2020) 876 >https:// www.researchgate.net/publication/348909705_Conlon_A_pseudo-song_generator_based_on_a_new_ pianoroll_wasserstein_autoencoders_and_optimal_interpolations> accessed 22 July 2023.
• Arkin RC and Moshkina L, ‘Affect in Human Robot Interaction’ in Rafael A. Calvo (ed) The Oxford Handbook of Affecting Computing (Oxford University Press, 2015)
• Article 29 Data Protection Working Party, ‘Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679 (wp251rev.01)’ 22.08.2018, <https://ec.europa.eu/newsroom/ article29/items/612053/en> s. 6-7, accessed 30 Jul 2023
• Avrupa Konseyi, ‘Guidelines On The Protection of Individuals With Regard to the Processing of Personal Data In A World Of Big Data’<https://rm.coe.int/CoERMPublicCommonSearchServices/ DisplayDCTMContent?documentId=090.000.16806ebe7a> accessed 22 July 2023.
• Bank of England (2019), ‘Machine Learning in UK Financial Services’, Working Paper (Bank of England, 16 October 2019) <https://www.bankofengland.co.uk/report/2019/machine-learning-in-uk-financialservices> accessed 22 July 2023.
• Batukan C, ‘XXI. Yüzyılın İktidar Biçimlerine Foucaultcu Bir Bakış’ (2020) 18 (69) Eğitim Bilim ve Toplum Dergisi.
• Berber LK, ‘Çapraz Etkileşim: Mahremiyete İlişkin Mevzuat ve Mahremiyet Standartları Arasındaki İlişki’, in Leyla Keser Berber and Ali Cem Bilgili (eds) Güncel Gelişmeler Işığında Kişisel Verilerin Korunması Hukuku (Oniki Levha Yayınları 2020).
• Bowman SR, ‘Eight Things to Know about Large Language Models’ (Arxiv 2 April 2023) <https://arxiv.org/ pdf/2304.00612.pdf>, accessed 22 July 2023.
• Buchanan B and Wright D, ‘The Impact of Machine Learning on UK Financial Services’ (2021) 37(3) Oxford Review of Economic Policy
• Matt Burgess, ‘ChatGPT Has a Big Privacy Problem’, (Wired, 4 Nisan 2023) <https://www.wired.com/story/ italy-ban-chatgpt-privacy-gdpr/> accessed 22 July 2023.
• Bush KE, ‘Generative Artificial Intelligence and Privacy: A Primer’ (Congressional Research Service, 23 May 2023), USA Congressional Research Service Report, >https://crsreports.congress.gov/product/pdf/R/ R47569> accessed 28 June 2023.
• CAHAI, Towards Regulation of AI Systems, https://rm.coe.int/prems-107320-gbr-2018-compli-cahai-couvtexte-a4-bat-web/1680a0c17a, 21 Agu 2023
• Cahit Arf, ‘Makine Düşünebilir mi ve Nasıl Düşünebilir?’ Tarık Tuna Gözütok (ed), Cahit Arf ve Atatürk Üniversitesindeki Halk Konferansları, 1958-1960 (1959) (Atatürk Üniversitesi Yayınları 1959).
• Calo MR, ‘Robots and Privacy’ in Patrick Lin, Keith Abney and George A. Bekey (eds) Robot Ethics: The Ethical and Social Implications of Robotics (The MIT Press, 2012)
• Chandran R, ‘Indigenous Groups İn NZ, US Fear Colonisation as AI Learns Their Languages’ (03 Ap 2023) <https://www.context.news/ai/nz-us-indigenous-fear-colonisation-as-bots-learn-their-languages> accessed 14 Jul 2023.
• Clarke R, ‘Profiling: A Hidden Challenge to the Regulation of Data Surveillance’ (1993) Journal of Law and Information Science 4 (2)
• Council Of European Union, ‘ChatGPT in the Public Sector – Overhyped or overlooked?’(2023) <https://www. consilium.europa.eu/media/63818/art-paper-chatgpt-in-the-public-sector-overhyped-or-overlooked- 24-april-2023_ext.pdf> accessed 22 July 2023.
• Council of Europe, The Protection Of Individuals with Regard to Automatic Processing of Personal Data In The Context Of Profiling Recommendation CM/Rec(2010)13 and Explanatory Memorandum (2011) 9 <https://rm.coe.int/16807096c3#:~:text=Recommendation%20CM%2FRec(2010)13%2C%20 adopted%20by%20the,Data%20(T%2DPD)>, accessed 21 Ag 2023
• Crawford K, Atlas of AI, (Yale University Press 2021).
• Crawford K and Paglen T, ‘Excavating AI The Politics of Images in Machine Learning Training Sets’ (2019), <https://excavating.ai/> accessed 22 July 2023
• Daniel W, ‘Meet IndexGPT, the AI stock picker JP Morgan is developing that may put your financial advisor out of business’ (Fortune, 26 May 2023) <https://fortune.com/2023/05/26/jpmorgan-indexgpt-a-i-stockpicker/> accessed 22 July 2023.
• David Deutsch, The Beginning of Infinity: Explanations That Transform the World (Allen Lane 2011). Denemeç IS, To Feed or Not to Feed?:An Analysis of the Copyright Issues Surrounding the Use of Machine Learning Algorithms (Lykeion 2021)
• Dwork C, McSherry F, Nissim K and Smith A, ‘Calibrating Noise to Sensitivity in Private Data Analysis’ in S Halevi and T. Rabin (eds) Theory of Cryptography (Springer, 2006) <https://people.csail.mit.edu/asmith/ PS/sensitivity-tcc-final.pdf> accessed 22 Jul 2023.
• Ebers M, ‘Regulating A and Robotics: Ethical and Legal Challenges, Algorithms and Law’ Martin Ebers ve Susana Navas Navarro (eds) Algorithms and Law (Cambridge University Press, 2020).
• El-Mahamdi E, Farhadkhani S, Guerraoui R et al. ‘On the Impossible Safety of Large Language Models’, (Arxiv, 9 May 2023), <https://arxiv.org/abs/2209.15259> accessed 22 July 2023
• Erwig M, Once Upon An Algorithm: How Stories Explain Computing (The MIT Press 2017).
• European Commission, Proposal for Regulation of The European Parliament and of The Council Laying Down Harmonised Rules On Artificial Intelligence (Artificial Intelligence Act) and Amending Certain Union Legislative Acts, 21.4.2021, COM(2021) 206 final, 2021/0106 COD <https://eur-lex.europa.eu/legalcontent/ EN/TXT/PDF/?uri=CELEX:52021PC0206&from=EN> accessed 22 Jul 2023.
• Hayden Field, ‘The First Fully A.I.-Generated Drug Enters Clinical Trials in Human Patients’ (CNBC 29 June 2023) <https://www.cnbc.com/2023/06/29/ai-generated-drug-begins-clinical-trials-in-human-patients. html> accessed 22 July 2023.
• Floridi L and Chiriatti M, ‘GPT‑3: Its Nature, Scope, Limits, and Consequences’ (2020) <https://dx.doi. org/10.2139/ssrn.3827044> accessed 22 Jul 2023.
• Freud S, A Complete Introductory Lectures on Psychoanalysis, James Strachey (çev) (W.W. Norton 1966). Garante Per La Protezione Dei Dati Personali (31 Mar 2023) <https://www.gpdp.it/web/guest/home/docweb/-/docweb-display/docweb/9870847#english> accessed 21 Ag 2023
• Gençoğlu O, ‘For Decades of AI Compute’ (Laconic 27 Feb 2023) <https://www.laconic.fi/ai-compute/> accessed 22 Jul 2023.
• Ginsburg J and Budiardjo LA, ‘Authors and Machines’ (2019) 34 (2) Berkeley Technology Law Journal <http:// dx.doi.org/10.2139/ssrn.3233885> accessed 20.7.2023
• Goodfellow I, Bengio Y and Courville A, Deep Learning (The MIT Press, 2016)
• Google, ‘Introducing PaLM 2’, (Google 10 Mayıs 2023) <https://blog.google/ technology/ai/google-palm-2-ailarge-language-model/> accessed 22 July 2023.
• Google, Reklam Yöneticisi ve Ad Exchange Program Politikaları Reklam Teknolojisi Sağlayıcıları, <https:// support.google.com/admanager/answer/9012903> accessed 13 Mar 2023.
• Göktaş P, Karakaya G, Kalyoncu AF and Damadoğlu E, Artificial Intelligence Chatbots in Allergy and Immunology Practice: Where Have We Been and Where Are We Going?’ (2023) The Journal of Allergy and Clinical Immunology: In Practice, <https://www.sciencedirect.com/science/article/pii/ S221.321.9823006414>, accessed 21 Agu 2023
• Güçlütürk OG and Kadıoğlu YM, ‘Yapay Zekâ ve Regülasyon’ Eylem Aksoy Retornaz and Osman Gazi Güçlütürk (eds) Gelişen Teknolojiler ve Hukuk II: Yapay Zekâ (On İki Levha Yayıncılık 2021)
• Gürses S and Preneel B, ‘Cryptology and Privacy in the Context of Big Data’ in Bart van der Sloot, Dennis Broeders and Erik Schrijvers (eds) Exploring the Boundaries of Big Data (Amsterdam University Press, 2016)
• Hanson Robotics, Sophia, <https://www.hansonrobotics.com/sophia/>, accessed 22 Jul 2023.
• Harris LA, ‘Generative Artificial Intelligence: Overview, Issues, and Questions for Congress’ (Congressional Research Service 9 June 2023) <https://crsreports.congress.gov/product/pdf/IF/IF12426> accessed 28 June 2023.
• Hendrycks D, ‘Natural Selection Favors AIs Over Humans’ (28 Mar 2023) <https://arxiv.org/abs/2303.16200> 22 Jul 2023
• Hiller LA and Isaacson L, Experimental Music Composition with an Electronic Computer (McGraw – Hill Book Company 1959).
• Huang S and Siddarth D, ‘Generative AI and the Digital Commons’ (Arxiv 20 March 2023), >https://doi. org/10.48550/arXiv.2303.11074> accessed 22 July 2023
• Hunt EB, Artificial Intelligence (Academic Press 1975).
• Irish Council For Civil Liberties – ICCL, https://www.iccl.ie/rtb-june-2021/ accessed 20 Feb 2022
• Isaacson W, Geleceği Keşfedenler Duygu Dalgakıran (çev) (Domingo 2014)
• İçer Z and Dönmez E, ‘Yüz Tanıma Teknolojilerinin Önleyici Ceza Hukuku ve Ceza Muhakemesi Süreçlerindeki Kullanımı ve Sınırları’ (2020) 15 (43) Ceza Hukuku Dergisi.
• Kaku M, Olanaksızlığın Fiziği, Engin Tarhan (çev) (ODTÜ Yayıncılık 2014)
• Kirchengast T, ‘Deepfakes and image manipulation: criminalisation and control’ (2020) 29 (3) Information& Communications Technology Law.
• Kişisel Verileri Koruma Kurumu, ‘Kişisel Verilerin Korunması Kanununa İlişkin Uygulama Rehberi’ (2019) https://www.kvkk.gov.tr/SharedFolderServer/CMSFiles/41784a70-2bac-4e4a-830f-35c628468646. PDF, accessed 22 Agu 2023.
• Kişisel Verileri Koruma Kurumu, Aydınlatma Yükümlülüğünün Yerine Getirilmesinde Uyulacak Usul ve Esaslar Hakkında Tebliğ, R.G. 10.03.2018, Sayı: 30356
• Kişisel Verileri Koruma Kurumu, ‘Kişisel Veri Güvenliği Rehberi Teknik ve İdari Tedbirler’ (2018) <https:// www.kvkk.gov.tr/yayinlar/veri_guvenligi_rehberi.pdf> 28 Jun 2023.
• Kızrak A, ‘Nesne Algılama Yaklaşımlarına Transformer Devrimi’ (Medium, 10 Ap 2021) <https://ayyucekizrak. medium.com/nesne-alg%C4%B1lama-yakla%C5%9F%C4%B1mlar%C4%B1na-transformer devrimibaf583a29a23> accessed 22 Jul 2023.
• Konečný J, Brendan H, Ramage D and Richtárik P, ‘Federated Optimization: Distributed Machine Learning for On-Device Intelligence’ (2016) <https://doi.org/10.48550/arXiv.1610.02527> accessed 22 Jul 2023.
• Koponen J, ‘Personalization and Augmentation’ in Esko Kilpi (ed) Perspectives on New Work (Sitra, 2016) Kotler P, Marketing Management (Pearson Education 2015)
• Kulular İbrahim MA, Robo Danışmanların Hukuken Değerlendirilmesi (Adalet Yayınevi 2023)
• Kurzweil R, İnsanlık 2.0: Tekilliğe Doğru Biyolojisini Aşan İnsan, Müge Şengel (çev) (Alfa Yayınları 2017)
• Küzeci E, Kişisel Verilerin Korunması (On İki Levha, 2020)
• Lee A, ‘What is a Pre-Trained AI Model?’ ( NVIDIA, 8 Dec 2022) <https://blogs.nvidia.com/blog/2022/12/08/ what-is-a-pretrained-ai-model/> accessed 22 Jul 2023.
• Leskovec J; ‘Enron Email Network’ (Stanford University) <https://snap.stanford.edu/data/email-Enron.html> accessed 22.7.2023; Bryan Klimt and Yiming Yang, ‘Introducing the Enron Corpus’ (2004), International Conference on Email and Anti-Spam (Natural Language Server 2021) >https://nl.ijs.si/janes/wpcontent/ uploads/2014/09/klimtyang04a.pdf> accessed 23.7.2023.
• Lovelace A, ‘Notes of the Translator’ for ‘Sketch of the Analytical Engine Invented by Charles Babbage’ (Taylor and Francis 1842) 722, <https://repository.ou.edu/uuid/6235e086-c11a-56f6-b50d-1b1f5aaa3f5e#page/1/ mode/2up> accessed 22 Jun 2023.
• Meta AI, ‘Meta and Microsoft Introduce the Next Generation of Llama’ (18 July 2023) https://ai.meta.com/blog/llama-2/>, accessed 22 July 2023.
• Lyon D, Vesikalı Yurttaş Barış Baysal (çev) (Kalkedon Yayınları 2012)
• Maume P, ‘Regulating Robo – Advisory’, 55(1) Texas International Law Journal, 51; Dominique Payette, ‘Regulating Robo-Advisers in Canada’, 33(3) Banking & Finance Law Review.
• McCarthy J, ‘Programs With Common Sense’ in D. Blake and A. Uttelly (eds) Proceedings of the Symposium on the Mechanization of through Processes (H.M. Stationery Office,1959)
• Menabrea LF, ‘Sketch of the Analytical Engine Invented by Charles Babbage, Esq.’ in Richard Taylor (ed), The Transactions of Foreign Academies of Science and Learned Societies (Taylor and Francis 1843).
• Microsoft, ‘Microsoft and OpenAI Extend Partnership’ (Microsoft 23 Jan 2023) <https://blogs.microsoft.com/ blog/2023/01/23/microsoftandopenaiextendpartnership/> accessed 22 Jul 2023.
• Metz C and Weise K, ‘Microsoft to Invest $10 Billion in OpenAI, the Creator of ChatGPT’ <https://www.nytimes. com/2023/01/23/business/microsoft-chatgpt-artificial-intelligence.html>, accessed 22 Jul 2023.
• Mittelstadt B, ‘From Individual to Group Privacy in Big Data Analytics’ (2017) 30 Philos. Technol.
• Murgia M, ‘Who’s using your face? The ugly truth about facial recognition’ (Financial Times, 19.4.2019) <https://www.ft.com/content/cf19b956-60a2-11e9-b285-3acd5d43599e> accessed 22 July 2023
• Norwegian Consumer Council, ‘Ghost in the Machine: Addressing the Consumer Harms of Generative AI’ (Norwegian Consumer Council, June 2023), www.forbrukerradet.no/ai, accessed 26 June 2023.
• OpenAI, ‘DALL-E 2 Extending Creativity’ (OpenAI 14 July 2023) <https://openai.com/blog/dall-e-2-extendingcreativity> accessed 22 July 2023.
• OpenAI, ‘API Data Usage Policies’, 14 Haziran 2023, <https://openai.com/policies/api-data-usage-policies> accessed 5 Jul 2023.
• OpenAI, ‘New Ways to Manage Your Data in ChatGPT’, 25 Ap 2023, <https://openai.com/blog/new-ways-tomanage-your-data-in-chatgpt> accessed 22 Jul 2023
• OpenAI, ‘ChatGPT4 Technical Report’ (Arxiv 27 Mar 2023) <https://doi.org/10.48550/arXiv.2303.08774> 10, accessed 22 Jul 2023.
• OpenAI, ‘Introducing ChatGPT’ (OpenAI 30 Nov 2022) <https://openai.com/blog/chatgpt> accessed 22 Jul 2023.
• Ozan Özparlak B, Büyük Veri Çağında Çalışma İlişkilerinde Yapay Zekâ Sistemlerinin Kullanılması: Hukuki Bir Değerlendirme (On İki Levha Yayınları 2021).
• Ozan Özparlak B, ‘Yeni Çağın Hukukunu Teknoloji ve Tasarım Şekillendirecek’ HBT Dergi Herkese Bilim Teknoloji, 12.1.2018.
• Ringe WG ve Ruof C, ‘A Regulatory Sandbox for Robo Advice, European Banking Institute’ (2018)
• Sankur B, İngilizce Türkçe Ansiklopedik Bilişim Sözlüğü (Pusula Yayıncılık, 2008).
• Silver D, Huang A and Maddison CJ, et al, ‘Mastering the Game of Go with Deep Neural Networks and Tree Search’ (2016) 529 Nature 484–489 <https://doi.org/10.1038/nature16961> accessed 20 July 2023.
• Smits J and Borghuis T, (2022) ‘Generative AI and Intellectual Property Rights’ in Bart Custers, Eduard Fosch- Villaronga (eds) Law and Artificial Intelligence, Information Technology and Law Series, (T.M.C. Asser Press 2022).
• Streeck W, Satın Alınan Zaman Kerem Kabadayı (çev) (Koç Üniversitesi Yayınları 2016)
• Taylor L, Floridi L and Sloot B, ‘Introduction: A New Perspective on Privacy’, Linnet Taylor, Luciano Floridi and Bart van der Sloot (eds) Group Privacy New Challenges of Data Technologies: (Springer, 2017)
• T.C. Cumhurbaşkanlığı Dijital Dönüşüm Ofisi, ‘Chatbot Uygulamaları ve ChatGPT Örneği’ (15 March 2023)
• TC Cumhurbaşkanlığı Dijital Dönüşüm Ofisi ‘Türkiye Cumhuriyeti Ulusal Yapay Zekâ Stratejisi’ (Cumhurbaşkanlığı Dijital Dönüşüm Ofisi, Ağustos 2021) >https://cbddo.gov.tr/SharedFolderServer/ Genel/File/TR-UlusalYZStratejisi2021-2025.pdf> accessed 22 Jul 2023.
• The Center for Research on Foundation Models at the Stanford Institute for Human-Centered Artificial Intelligence, ‘On the Opportunities and Risks of Foundation Models’ (Arxiv, 16 August 2021) <https:// doi.org/10.48550/arXiv.2108.07258>, accessed 22 July 2023.
• Touvron H, Martin L; ‘Llama 2: Open Foundation and Fine-Tuned Chat Models’, (Meta AI, 18 July 2023) >https://ai.meta.com/research/publications/llama-2-open-foundation-and-fine-tuned-chat-models/> accessed 22 July 2023.
• Turing AM, ‘Computing Machinery and Intelligence’ (1950) Mind, Vol. LIX, Sayı 236, 433–460, https://doi. org/10.1093/mind/LIX.236.433 accessed 22.7.2023
• UNESCO, ‘Ethics of Neurotechnology’ (Unesco) <https://www.unesco.org/en/ethics-neurotech> accessed 22 Jul 2023.
• United Nations, ‘Meet the Robots Who Are Making The World a Better Place’ (UN News 06 Jul 2023) <https:// news.un.org/en/story/2023/07/1138412> accessed 22 Jul 2023
• Üstündağ Soykan E, Bilgin Z, Ersoy MA and Tomur E, ‘Differentially Private Deep Learning for Load Forecasting on Smart Grid’ (2019) IEEE Globecom Workshops, <10.1109/GCWkshps45667.2019.902.4520> accessed 22 Jul 2023.
• Van der Sloot B, ‘The Individual in the Big Data Era: Moving Towards an Agent-Based Paradigm’ in Bart van der Sloot, Dennis Broeders, Erik Schrijvers (eds) Exploring the Boundaries of Big Data (Amsterdam University Press, 2016) 196-199.
• Van der Sloot B and Wagensveld Y, ‘Deep Fakes: Regulatory Challenges for the Synthetic Society’ (2022) 46 (1) Computer Law & Security Review.
• Veale M, Binns R and Edwards L, ‘Algorithms that Remember: Model Inversion Attackand (2018) 376 Data Protection Law’ Phil. Trans. R. Soc. A Wachter S, ‘Data Protection in the Age of Big Data’ (2019) 2 Nature Electronics Volume
• Wachter S, ‘Affinity Profiling and Discrimination by Association in Online Behavioural Advertising’ (2020) 35(2) Berkeley Technology Law Journal
• Weizenbaum J, ‘ELIZA-A Computer Program For the Study of Natural Language Communication Between Man and Machine’ (1966) 9(1) Communications of the ACM.
• Werra J, ‘AI Transparency: An Emerging Principle in The IP Ecosystem?’ (2023) Journal of Intellectual Property Law& Practice, <https://doi.org/10.1093/jiplp/jpad041
• Woebot Health, (Woebolt Health 2023) <https://woebothealth.com/> accessed 27 July 2023; Attia Qammar et al., ‘Chatbots to ChatGPT in a Cybersecurity Space: Evolution, Vulnerabilities, Attacks, Challenges, and Future Recommendations’ (2021) 14(8) Journal of Latex Class Files.