Registry
Three failed consent and capture controls across two registry incidents
Each row is a control that was in place, or should have been, and did not hold. The incident record explains who was responsible and what changed afterward.
| Incident | Date | Control | Responsible | What failed |
|---|---|---|---|---|
| Amazon Echo Sends a Private Conversation to a Contact | May 2018 | Wake-word detection | Amazon | Background speech was taken as the wake word |
| Tesla Staff Share Customer Car Camera Footage | 2019 to 2022 | Employee access to recordings | Tesla | Labelers shared images and video through internal messaging |
| Tesla Staff Share Customer Car Camera Footage | 2019 to 2022 | De-identification | Tesla | Location data could identify owners despite a promise of anonymity |
Implementations
Device makers both added and removed capture controls in 2025 and 2026
Meta now stops the glasses camera if the recording LED is covered during capture. Microsoft relaunched Recall as opt-in with enclave processing. Apple extended Private Cloud Compute to Google Cloud data centers in June 2026. Amazon went the other way, removing local voice processing from Echo devices in March 2025. China requires separate consent for face data and on-device storage by default.
| Implementation | Vendor or body | Country | What it enforces | Status |
|---|---|---|---|---|
| Echo local processing removed | Amazon | United States | Control withdrawn: all voice requests now go to the cloud | Mar 28, 2025 |
| Face data filing and on-device storage | CAC and MPS | China | Separate consent; on-device storage by default; non-face alternative; filing above 100,000 people | Effective Jun 1, 2025 |
| Private Cloud Compute | Apple | United States | Stateless processing with verifiable transparency; extended to Google Cloud | Expanded Jun 8, 2026 |
| Recall opt-in design | Microsoft | United States | Off unless chosen; Windows Hello; enclave processing; filters passwords and card numbers | Sep 2024 |
| Recording LED tamper check | Meta | United States | Camera stops if the LED is covered at any point during recording | Rolling out Aug 28, 2026 |
Row color shows the agent class served: orange physical, teal personal and ambient, blue software.
Recent events
- Governor Newsom vetoed California SB 1130 on September 30, 2026 after it passed the Senate 30-8 and the Assembly 57-14.
- Meta's August 2026 LED fix followed published instructions for disabling the light.
- Texas announced the $1.375 billion Google settlement over voiceprints and face geometry on October 31, 2025.
- Tesla staff shared footage from customer car cameras despite a privacy promise, Reuters reported in April 2023.
Exposure
Data capture and retention rates very significant or critical for 12 of 17 agent types
The consent and capture discipline covers the data capture and retention dimension of the agent attack surface ratings. These agent types depend on it most.
| Agent type | Dimension | Rating | Why |
|---|---|---|---|
| Ambient sensors | Data capture and retention | Critical | Capture of people who never agreed to it is the main exposure |
| Robotaxis and autonomous vehicles | Data capture and retention | Very significant | Cabin interior and exterior video, audio, rider behavior, trip history, biometric inference |
| Drones | Data capture and retention | Very significant | Cameras record everything under the flight path |
| Fleets and swarms | Data capture and retention | Very significant | Fleet-wide telemetry aggregation produces datasets with substantial surveillance value |
| Phones and tablets | Data capture and retention | Very significant | The most distinctive dimension |
| Wearables | Data capture and retention | Very significant | Most distinctive dimension for wearables |
| Vehicle cabin AI | Data capture and retention | Very significant | The most distinctive dimension |
| Smart home assistants | Data capture and retention | Very significant | The most distinctive dimension |
| Medical devices | Data capture and retention | Very significant | Protected health information under HIPAA |
| Public infrastructure | Data capture and retention | Very significant | The most distinctive dimension |
| Workflow agents | Data capture and retention | Very significant | Workflow state, sub-agent interactions, tool outputs, customer data flowing through the orchestrated process |
| Enterprise agents | Data capture and retention | Very significant | Agents read and store company data at scale |
Rules
Biometric laws in Texas, Illinois and China carry the penalties; the EU adds transparency duties
| Rule | Jurisdiction | What it requires | Status |
|---|---|---|---|
| EU AI Act Article 50 transparency | EU | Disclose AI interaction; machine-readable marking of synthetic content | In force Aug 2, 2026 |
| EU AI Act Article 5 prohibitions | EU | Bans face scraping, emotion recognition at work and school, most police real-time face ID | Feb 2, 2025 |
| Face recognition security management measures | China | Separate consent; guardian consent under 14; on-device storage; non-face alternative | Effective Jun 1, 2025 |
| Personal Information Protection Law, Articles 28 and 29 | China | Separate consent for sensitive data including biometrics | In force Nov 1, 2021 |
| Texas CUBI | Texas | Notice and consent before capturing face geometry or voiceprints | In force |
| Colorado HB24-1130 | Colorado | Biometric consent, retention and deletion rules | Effective Jul 1, 2025 |
Status colors: green in force, blue voluntary standard or framework, amber adopted and phasing in, gray draft or pending, red withdrawn.
Limits
Indicators and consent screens protect the device owner, not bystanders
Bystanders never agreed to anything, and once footage leaves the device, retention and access controls decide what happens to it.
Record
Page Record
- Datasets
- ai_control_implementations.csv (5 rows for this page); ai_incident_controls.csv (3 linked); ai_attack_surface.csv
- Key sources
- Amazon
Apple
CAC and MPS
Meta
Microsoft - Source notes
- Recording LED tamper check: secondary source
- Last verified
- October 2026