{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.0.0","mappingVersion":"2026-07-29.1","changeId":"a207d871-fd69-4c3c-a3ec-098e4136d700","screeningDate":"2026-09-24T16:38:35.465Z","publicationGate":"published","company":{"id":"01043cf2-bec9-4756-bb3b-3d47c46c364e","name":"Apple","slug":"apple","industry":"Tech Giant"},"policy":{"id":"421b3f0c-5924-4e3d-b84e-2ff68a441041","name":"Apple Intelligence & Privacy","type":"ai","jurisdiction":"Global","sourceUrl":"https://www.apple.com/apple-intelligence/"},"sourceConfidence":{"state":"verified-retrieval","lastCheckedAt":"2026-09-24T16:38:35.457Z","retrievalChannel":"direct","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":1,"sha256":"f3bf0480c1700607296072398b325bce3505911b907d7ae6778c4c58d426ec7a","capturedAt":"2026-07-06T04:05:51.205Z"},"current":{"version":2,"sha256":"7879311970d154d6bb3dc6ba1f7cbb85e7c30dd6545233893cd6df0fd1d1314a","capturedAt":"2026-09-24T16:38:35.461Z"}},"assessment":{"summary":"Apple strengthens its privacy promise for AI data but introduces new usage limits for some generative AI features.","overallRisk":"Low","overallScore":3,"previousPublicChange":null,"scoreDelta":null,"direction":"baseline","reasons":[{"icon":"warning","textEn":"New usage limits for AI writing tools restrict functionality.","textIt":"Nuovi limiti di utilizzo per gli strumenti di scrittura AI limitano la funzionalità.","deltaScore":-1,"evidenceQuote":"Usage limits may apply.","evidenceSide":"new","relatedKpi":"kpiAiTrainingOptOut","anchorStatus":"verified"},{"icon":"warning","textEn":"New usage limits for AI shortcut creation may impact automation.","textIt":"Nuovi limiti di utilizzo per la creazione di scorciatoie AI possono influire sull'automazione.","deltaScore":-1,"evidenceQuote":"Usage limits may apply.","evidenceSide":"new","relatedKpi":"kpiAiTrainingOptOut","anchorStatus":"verified"},{"icon":"info","textEn":"Stronger privacy guarantee for Private Cloud Compute enhances data protection.","textIt":"Una garanzia di privacy più forte per Private Cloud Compute migliora la protezione dei dati.","deltaScore":2,"evidenceQuote":"without making your data accessible to Apple or anyone else.","evidenceSide":"new","relatedKpi":"kpiThirdPartySharing","anchorStatus":"verified"}],"keyPoints":[{"textEn":"Apple explicitly states user data is not accessible to them or third parties with Private Cloud Compute.","textIt":"Apple dichiara esplicitamente che i dati utente non sono accessibili a loro o a terzi con Private Cloud Compute.","sentiment":"positive"},{"textEn":"New usage limits are introduced for AI writing tools and shortcut creation features.","textIt":"Vengono introdotti nuovi limiti di utilizzo per gli strumenti di scrittura AI e le funzionalità di creazione di scorciatoie.","sentiment":"negative"},{"textEn":"Several AI features, previously announced as 'coming soon,' are now 'available' or 'rolling out.'","textIt":"Diverse funzionalità AI, precedentemente annunciate come 'in arrivo', sono ora 'disponibili' o 'in fase di lancio'.","sentiment":"positive"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"Enterprises using Apple devices benefit from enhanced data protection assurances, reducing compliance burden under GDPR. Usage limits could impact internal AI tool adoption strategies.","complianceNoteEn":"GDPR Art. 28"},{"region":"EU","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"Stronger privacy claims align well with GDPR principles, especially regarding data storage and accessibility. However, new usage limits might slightly affect user experience.","complianceNoteEn":"GDPR Art. 5, 25"},{"region":"Global","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"Enterprises globally can leverage Apple's privacy-centric AI, potentially reducing cross-border data transfer concerns. Usage limits need to be factored into global deployment strategies.","complianceNoteEn":"International Data Transfer Frameworks"},{"region":"Global","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"The explicit global privacy commitment for Private Cloud Compute sets a high standard, benefiting users worldwide. Usage limits are a general functional note.","complianceNoteEn":"Global Privacy Standards"},{"region":"US","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"Businesses benefit from Apple's robust privacy framework, simplifying compliance with state-level privacy laws. Usage limits may require internal policy adjustments for AI tool use.","complianceNoteEn":"State Privacy Laws"},{"region":"US","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"Enhanced privacy statements provide stronger consumer protection, aligning with CCPA/CPRA principles. Usage limits are a minor functional constraint for users.","complianceNoteEn":"CCPA/CPRA"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAiTrainingOptOut","label":"AI training opt-out","value":"Not Available"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":3,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Comprehensive"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":3,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":3,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Implicit"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]}]},"humanReviewQuestions":["Does the original Apple Intelligence & Privacy source still match the recorded public snapshot version 2?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/a207d871-fd69-4c3c-a3ec-098e4136d700","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"b499c4d2ef50013555a456e7006d887d0088a01016fb927702e3e55183528523"}