Meta pauses employee activity monitoring after ‘high-priority security’ incident

Meta in a recent development has decided to hit a pause on the employee activity monitoring program driven by the internal mouse-tracking tool over data security concerns.

The announcement comes as the parent company of Facebook and Instagram came across disturbing revelations during the security review. As reported by Reuters, the sensitive employee data gathered by mouse-tracking was accessible to all Meta staffers, thereby sparking the growing fears of privacy risks.

Meta launched this tracking tool named Model Capability Initiative (MCI) in April to monitor the employees’ digital activity and interaction for AI models training.

The purpose of the tracking tool was to capture everything from mouse movements and clicks to navigating through menus to create AI capable of performing tasks autonomously.

Meta has confirmed the announcement of suspension but it is unclear for how long Meta is planning to halt the program.

According to company spokesperson Tracy Clayton, "We have carefully designed this program ​with privacy safeguards and while we have no indication at this time that ​any data was improperly accessed by Meta employees, we're pausing it while we investigate.”

The spokesperson said, the pause will not be materialized soon as it would take time to halt the program for everyone.

The decision of suspension follows a “high-priority security incident (SEV) report” filed by an employee regarding the exposure of sensitive internal data.

According to internal documentation, the data exposed encompass “full ​prompts and transcriptions, private ​conversations, people & performance ⁠data, DSS sensitivity ratings (1-4).”

"I have accessed both personal tax and medical information through ⁠my ​work computer, as have many thousands of employees. ​We were told this data would be protected and only used for valid business purposes after aggressive ​filtering," the employee wrote.

This incident comes after a May report by Reuters, which alleged that the program was gathering more comprehensive data than originally disclosed and storing it in an unencrypted format, fueling privacy concerns among staff.

In response to the SEV, internal discussions indicate that employees are urging an investigation into the security lapses.