Over the weekend, OpenAI launched a new finance service that provides users with spending insights and financial advice, provided they connect their bank account to the service. Using Plaid technology, users can link their bank accounts to the service so that it can analyse spending habits and answer financial questions.OpenAI announced that US-based Pro users of its ChatGPT generative AI will now be able to access a preview of a new “personal finance experience”, which will allow users to monitor spending and get suggestions on how to save.“Now you can securely connect your financial accounts, see a dashboard of where your money is going, and ask ChatGPT questions grounded in your financial context – all while staying in control of your data. We’re starting with a preview to a smaller group so we can learn from real-world use, improve the experience, and expand thoughtfully,” OpenAI said.While OpenAI has said that the service is secure, with “financial memories” able to be deleted and accounts disconnected, experts have suggested that the service still comes with risks.Senior Policy Counsel at the Centre for Democracy and Technology’s Privacy and Data Project, Ridhi Shetty said that OpenAI’s security measures are not sufficient for protecting bank account data shared with generative AI.“Even if ChatGPT's new feature doesn't access full account numbers or have the ability to make changes to financial accounts, the financial information it does collect can reveal deeply personal details about a person’s life, habits, vulnerabilities, and relationships,” Shetty told The Record.She also noted that OpenAI does not comment on whether the financial data could be used for commercial purposes, such as personalised advertising “despite the obvious incentives to do so.”Shetty added that the reliability of a “tool that doesn't abide by the obligations that professional financial advisors have to protect clients' privacy and act in their best interests” could come into question.Additionally, Chief Information Security Officer at Noma Security, Diana Kelley told The Record, that the “view only” aspect of the service that OpenAI has mentioned “does not mean low-risk: if someone takes over your ChatGPT account, they may get a consolidated picture of your balances, spending, investments, debts, goals and financial history.”Ram Varadarajan, CEO at Acalvio, also said that having the all the banking and spending data of users makes OpenAI a high-value target for account takeover cyber attacks.
Want to see more stories from trusted news sources?Make Cyber Daily a preferred news source on Google.