Mexico's Cyber Police Alert: Photo-to-Cartoon AI Apps Risk Personal Data

What happened

Mexico's Cyber Police unit identified risks in AI applications that convert photographs into cartoon or animated art styles, a viral trend particularly involving Studio Ghibli-style transformations.

The applications require access to user images and personal data to function, and collect metadata and biometric patterns including facial information without always explicitly disclosing this practice.

Reported impact

The collected biometric data can be used to create databases of biometric patterns that may be commercialized or used for purposes beyond the stated service improvements.

When users share photos with other people, including minors, the personal information of those individuals is also placed at risk. Identity theft and fraud are potential consequences of data exposure.

Index analysis

The apps access not only photos but also collect metadata and biometric patterns such as facial features and physical characteristics, often without explicit user awareness.

Personal data collection can include names, telephone numbers, email addresses, and links to social media accounts, creating vulnerability to identity fraud and unauthorized use.

Governance controls

The Cyber Police recommended that users review the privacy policies of applications before use to understand how data is collected, stored, used, and whether it is shared with third parties.

Classification

Organization

Unidad de Policía Cibernética de la Secretaría de Seguridad Ciudadana de la Ciudad de México (regulator)

Category

Privacy and surveillance

Industry

Consumer services

Country

Mexico

Harm status

Potential harm

Intent

Unknown

Timing

Unknown

Harm types

Economic or property, Human or fundamental rights

Harmed

Children, Consumers, General public

Failure modes

Training data misuse

AI systems

Photo-to-cartoon transformation apps

Regulations

GDPR (cited)

Sources and evidence