In 2016, thousands of people hunted for Pikachu around their cities with their smartphones. At the time, could they have realized they would be contributing to an AI training dataset that would power everything from delivery robots to military drones?
That's not a hypothetical question. An AI company has been using billions of real-world images captured by PokĆ©mon Go playersāvideos of streets, neighborhoods, and landmarks collected over a decadeāto train navigation technology already being used by delivery robots and, possibly, military drones.
Privacy lawyers would call this a purpose limitation problem: data should only be used for the purpose it was collected for, and repurposing itāespecially for something a reasonable person might object toāgenerally requires fresh disclosure and, often, new consent.
Consenting to sharing visual-spatial data to play a viral game is one thing. But nobody would think that hunting virtual depictions of Eevee, Gengar, or Bulbasaur would result in drones learning to more effectively navigate warzones.
Scroll down to check out the story from Ars Technica to learn more.
Best,
Arlo
Highlights From OsanoNew From Osano
Blog: The Louisiana Data Privacy Act (LDPA): What to Know About Data Privacy Compliance on the Delta
Louisianans know how to let the good times rollāand nothing stops a good time dead in its tracks faster than a lack of privacy. Starting January 1, 2027, businesses serving Louisianans will need to honor privacy rights and meet key obligations to stay in compliance with the Louisiana Data Privacy Act (LDPA). Learn more in our blog.
In Case You Missed It...
Blog: Wiretap Lawsuits: Why CIPA, the ECPA, and the CDAFA Are a Package Deal
Wiretap litigation isnāt a brand-new concept anymoreābut even when businesses are prepared to respond to a demand letter, it can be a shock to see more than just CIPA invoked. Find out why the ECPA and CDAFA so often accompany CIPA in wiretap demand letters and how your business can reduce its risk.
Events
Webinar: Privacy Enforcement 2026: Regulatorsā Focus and Compliance Priorities
2026 is more than halfway through, but it feels like a yearās worth of data privacy developments have already transpiredāand thereās already more on the horizon. Join Osanoās Senior Privacy Program Manager Ashley Fowler and Red Clover Advisorsā Jodi Daniels for a webinar thatāll clarify the complexity of 2026ās privacy enforcement and compliance.
Save your seat | June 30, 1 pm EST
Top Privacy Stories of the Week
PokƩmon Go Players Unwittingly Contributed to Tech with Military Drone Uses
A decade after the global craze for PokƩmon Go peaked, an AI company has been using billions of real-world images captured by millions of players to develop navigation technologies for delivery robots and possibly military drones. That represents an intriguing but potentially discomfiting legacy for an augmented reality mobile game that has incentivized gamers to capture short smartphone videos of physical neighborhoods and landmarks.
Vermont Enacts Consumer Data Privacy Law
On June 16, 2026, Vermont Governor Phil Scott signed the Vermont Data Privacy and Online Surveillance Act (S 71) into law. Vermont is the fourth stateāfollowing Alabama, Louisiana, and Oklahomaāto pass a law this year.
Canada's Bill C-36 Introduces Privacy Reforms, Enforcement Changes
Canada introduced its long-awaited privacy reform legislation, Bill C-36, the Protecting Privacy and Consumer Data Act. Bill Cā36 would recognize privacy as a fundamental right, strengthen consent and deletion rights, increase protections for children, create the new Digital Safety and Data Protection Commission, and modernize PIPEDA.
When Will the UKās Social Media Ban Start, and Which Apps Will Be Affected?
A social media ban for under-16s has been announced by the UK government. It will be introduced in early 2027. The government is also considering an overnight curfew and measures to stop infinite scrolling for under-18s. The ban will cover platforms including Snapchat, TikTok, Instagram, Facebook, and X, the government said. YouTube will also be banned for under-16s, but YouTube Kidsāa version of the video-sharing app designed to be safe for childrenāwill not be included.
Federal Court Dismisses DOJ Lawsuit Seeking California Voter Data
A federal judge dismissed the US Department of Justiceās (DOJ) lawsuit against the State of California in United States v. Weber, in which the DOJ sought to compel the state to turn over its full, unredacted statewide voter registration listāincluding votersā sensitive personal dataāto the federal government. The lawsuit was part of a broader series of actions by the DOJ seeking similar information from jurisdictions across the country.
Like what you see in the Privacy Insider newsletter?
There's more to explore:
šļøThe Privacy Insider Podcast
We go deeper into additional privacy topics with incredible guests monthly. Available on Spotify or Apple.
š± The Osano Subreddit
Join our official subreddit to stay up to date on the latest news, analysis, guidance, and content from Osano!
š The Privacy Insider: How to Embrace Data Privacy and Join the Next Wave of Trusted Brands
The book inspired by this newsletter: Osano CEO, Arlo Gilbert, covers the history of data privacy and how companies can start building a privacy program from the ground up. More details here.
If youāre interested in working at Osano, check out our Careers page!
Arlo Gilbert
Arlo Gilbert
Arlo Gilbert is the CIO & co-founder of Osano. A native of Austin, Texas, he has been building software companies for more than 25 years in categories including telecom, payments, procurement, and compliance. In 2005 Arlo invented voice commerce, he has testified before congress on technology issues, and is a frequent speaker on data privacy rights.
