Google Chrome Installs 4GB Gemini Nano AI Model, Exposes EU Privacy Risk

GOOGLGOOGL

Google Chrome now silently installs a 4GB on-device Gemini Nano AI model file on devices meeting hardware criteria, automatically redownloading the weights.bin file if manually deleted. Critics warn this practice may breach EU ePrivacy Directive and GDPR rules, potentially exposing Google to regulatory fines and eroding user trust.

1. Automatic Gemini Nano Download

Chrome now places a 4GB file named weights.bin in the OptGuideOnDeviceModel directory of any device that meets its hardware requirements. The download initiates without user consent, and manual deletion only triggers an automatic redownload on the next browser update or launch.

2. Regulatory Compliance Concerns

Researcher Alexander Hanff argues that deploying the model without explicit opt-in violates Article 5(3) of the EU ePrivacy Directive and undermines GDPR transparency obligations. Legal experts suggest Google could face investigations or fines for bypassing informed consent protocols.

3. User Impact and Data Costs

Beyond potential privacy infractions, each distribution round could consume 24–240 GWh across 100 million to 1 billion devices, emitting 6,000–60,000 tonnes of CO₂. In markets with metered data, a single 4GB download may exhaust a user’s entire monthly allowance, leading to unforeseen consumer expenses.

4. Google’s Official Response

Google states the on-device model powers security tasks like scam detection and can be removed via Chrome settings or enterprise policies. The company says it began offering an opt-out toggle in February, ensuring the model no longer downloads once disabled.

Sources

QF