{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.1.0","mappingVersion":"2026-07-29.1","changeId":"45b8e993-7148-4a8b-863c-13d36f9c2074","screeningDate":"2026-10-31T16:41:48.054Z","publicationGate":"published","company":{"id":"01043cf2-bec9-4756-bb3b-3d47c46c364e","name":"Apple","slug":"apple","industry":"Tech Giant"},"policy":{"id":"86088457-fcad-4537-a6b7-809019ce586c","name":"Improve Siri and Apple Intelligence Privacy Notice","type":"ai","jurisdiction":"Global","sourceUrl":"https://www.apple.com/legal/privacy/data/en/improve-intelligence/"},"sourceConfidence":{"state":"verified-retrieval","lastCheckedAt":"2026-10-31T16:41:48.048Z","retrievalChannel":"direct","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":1,"sha256":"8a511ca634b495504ba89aa5062facbfa3477d7cf27af6231c0ca1b43ce75211","capturedAt":"2026-10-02T04:55:30.078Z"},"current":{"version":2,"sha256":"75db4e50ee2cffdea9dab4cf81b55fca3dfa8e965130b387e040774dccfbc086","capturedAt":"2026-10-31T16:41:48.048Z"}},"analysisLineage":{"status":"verified","requestSha256":"a60f38f33f7f9640efbf415db54218bd83567eba58b1641c662b587efae3d353","responseSha256":"6f1211c3fb7e654eeed244aacba743d564ebb82cb1a2cae951c01b6908beda54","model":"gemini-2.5-flash","promptVersion":"policy-analysis.v3-full-document","schemaVersion":"policy-analysis.schema.v2","inputCoverage":"complete","semanticCoverage":"not_measured","documents":{"old":{"sha256":"8a511ca634b495504ba89aa5062facbfa3477d7cf27af6231c0ca1b43ce75211","charLength":15071,"byteLength":15147,"rangeUnit":"utf16-code-unit","includedRanges":[[0,15071]],"excludedRanges":[]},"new":{"sha256":"75db4e50ee2cffdea9dab4cf81b55fca3dfa8e965130b387e040774dccfbc086","charLength":15171,"byteLength":15247,"rangeUnit":"utf16-code-unit","includedRanges":[[0,15171]],"excludedRanges":[]}},"boundary":"Hash verification links retained inputs and the application SDK request. It does not prove provider execution, semantic completeness or legal correctness."},"captureLineage":{"old":{"provenance":"unknown","sourceUrl":null,"requestedUrl":null,"finalUrl":null,"capturedAt":"2026-10-02T04:55:30.078Z","urlDisclosure":"credentials-query-fragment-redacted"},"current":{"provenance":"captured","sourceUrl":"https://www.apple.com/legal/privacy/data/en/improve-intelligence/","requestedUrl":"https://www.apple.com/legal/privacy/data/en/improve-intelligence/","finalUrl":"https://www.apple.com/legal/privacy/data/en/improve-intelligence/","capturedAt":"2026-10-31T16:41:48.048Z","urlDisclosure":"credentials-query-fragment-redacted"}},"assessment":{"summary":"Apple now collects links you open from Siri's world knowledge searches to improve its AI, expanding data collection for opt-in users.","overallRisk":"Medium","overallScore":6,"previousPublicChange":null,"scoreDelta":null,"direction":"baseline","reasons":[{"icon":"warning","textEn":"New data type collected: links from world knowledge searches.","textIt":"Nuovo tipo di dati raccolti: link da ricerche di conoscenza globale.","deltaScore":1,"evidenceQuote":"and the links you open from world knowledge searches.","evidenceSide":"new","relatedKpi":"kpiDataCollection","anchorStatus":"verified"},{"icon":"warning","textEn":"Increased scope of user interaction data for AI model training.","textIt":"Ambito aumentato dei dati di interazione utente per l'addestramento AI.","deltaScore":1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":"kpiAiTrainingOptOut","anchorStatus":"not-recorded"},{"icon":"info","textEn":"Data is still de-identified and not linked to Apple Account.","textIt":"I dati sono ancora de-identificati e non collegati all'account Apple.","deltaScore":-1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"}],"keyPoints":[{"textEn":"Apple will now collect links opened from Siri's world knowledge searches if you opt-in.","textIt":"Apple raccoglierà ora i link aperti dalle ricerche di conoscenza globale di Siri se aderisci.","sentiment":"negative"},{"textEn":"This expands the type of user interaction data gathered for AI model training and improvement.","textIt":"Ciò espande il tipo di dati di interazione utente raccolti per l'addestramento e il miglioramento dei modelli AI.","sentiment":"negative"},{"textEn":"Collected data remains unassociated with your Apple Account and personal details are removed.","textIt":"I dati raccolti rimangono non associati al tuo account Apple e i dettagli personali vengono rimossi.","sentiment":"positive"},{"textEn":"Opt-in is required for this data collection, giving users control over their privacy.","textIt":"È richiesto l'opt-in per questa raccolta dati, dando agli utenti il controllo sulla loro privacy.","sentiment":"neutral"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"Enterprises using Apple devices should assess if this expanded data collection impacts their internal privacy policies or compliance with GDPR, especially for employee data.","complianceNoteEn":"GDPR Art 28"},{"region":"EU","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"The expanded data collection, even with de-identification, raises concerns under GDPR regarding the scope of personal data processing. Users should be fully informed about what data is collected.","complianceNoteEn":"GDPR Art 5, 6"},{"region":"Global","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"Global enterprises must ensure their internal policies and user agreements reflect this expanded data collection, maintaining transparency and compliance across various jurisdictions.","complianceNoteEn":null},{"region":"Global","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"Users worldwide face a slight increase in data collection scope for AI improvement, requiring careful consideration of the opt-in choice despite de-identification efforts.","complianceNoteEn":null},{"region":"US","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"Businesses deploying Apple devices should review their data governance strategies to account for this additional data collection, ensuring alignment with US state privacy regulations.","complianceNoteEn":"CCPA/CPRA"},{"region":"US","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"The collection of links from searches increases the data footprint, which could be a concern under state privacy laws like CCPA/CPRA, even with de-identification.","complianceNoteEn":"CCPA/CPRA"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAiTrainingOptOut","label":"AI training opt-out","value":"Opt-Out"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Partial"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiContentModeration","label":"Content moderation","value":"Opaque"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Explicit Opt-In"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original Improve Siri and Apple Intelligence Privacy Notice source still match the recorded public snapshot version 2?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/45b8e993-7148-4a8b-863c-13d36f9c2074","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"95ee064503a68e77557e3f00e1e47490e11c312e0b56a3401310aaf9d1e73d6d"}