61 free resources on this topic. Everything here is free and hand-picked. You can also search within this topic.
Claroc security research on apps made with Grok's Build mode. The researchers report that publishing defaulted to anyone-with-the-link access, that most of 37,571 reachable app addresses opened without sign-in, and that open apps held internal data from dozens of organizations. Findings are the researchers' own.
Ramona C. Truta examines Alignerr's interview terms and privacy policy and raises concerns about rights to applicant recordings and data. This freely readable commentary presents the author's interpretation and allegations, not an adjudicated legal finding or individualized legal advice.
Anthropic introduces read-only bank and card connections through Plaid for questions about balances and transactions. The feature cannot move or invest money and begins as a U.S. beta on paid Pro, Max and Ultra plans; this announcement is free to read.
A free, no-sign-up walkthrough from AI Endgame with click-by-click steps for setting up a password manager and securing email, phone number, bank, credit and government accounts against AI-enabled scams such as cloned voices. The site estimates under five hours.
An IBTimes UK article on companies selling workplace emails, Slack messages, and documents to AI developers, and the questions this raises about employee privacy, consent, and who profits.
Andrej Karpathy's blog post on personal digital hygiene.
An ACM paper examining how conversational AI memory features build what the authors call an "algorithmic self-portrait" from information users disclose in private chats, and the questions this raises about data sensitivity and user agency.
A blog from Tinfoil covering confidential computing and privacy-preserving AI infrastructure, with posts on how the company secures AI workloads and related technical developments.
An independent nonprofit offering research and programs on emerging technology topics including networked incitement, privacy and community safety, surveillance overreach, and digital harms that threaten democracy.
A Thinking On Paper podcast episode with Carissa Véliz, an Oxford associate professor working on AI ethics. She describes privacy as an ability, a right and a duty, explains what companies can infer from location data, and discusses algorithmic decisions that cannot be explained or appealed, decentralized identity, and choosing tools such as Signal and DuckDuckGo. Free to listen or watch.
A bimonthly virtual series from The Privacy Center at Georgetown Law and Tech Policy Press launching October 22 on Zoom. Rather than another "AI governance" conversation, the dialogues dig into questions upstream of tech policy — power, labor, war, justice, privacy, art, community and human consciousness. The kickoff features remarks from Dr. Alondra Nelson of the Institute for Advanced Study; free registration.
A personal AI assistant for email, calendar, meeting notes, dictation and errands that runs 100% locally on your own device for privacy. Invite-only beta for Mac and Windows, with Linux, iPhone and Android planned. Backed by Andreessen Horowitz and Khosla Ventures.
A regulatory summary of the revision to Japan's Act on the Protection of Personal Information passed by the Diet on July 10, 2026. It describes the country's first administrative surcharge for serious violations and a consent exception for statistics creation and AI model development, and notes the law is enacted but not yet in force.
The National Institute of Standards and Technology's hub for cybersecurity and privacy standards, guidelines and best practices, including the Cybersecurity Framework and AI risk work, for industry, agencies and the public.
Reports that a breach of the Defense Manpower Data Center exposed unencrypted names, contact information, dates of birth, Social Security numbers and military job records of nearly 2.8 million living and 294,000 deceased people with U.S. military ties. Unauthorized access lasted from October 2025 to July 2026 through a file-sharing system vulnerability.
Program for Georgetown Law's Center on Privacy & Technology conference on "de-datafication," held October 6, 2026, with sessions on the threats data collection poses and paths toward reducing reliance on mass data collection.
A column by tech and telecom writer Karl Bode criticizing a new Meta AI product over surveillance and privacy concerns.
Hunterbrook investigation reporting that the Muse AI tool could use Facebook data to build lists of people in vulnerable groups on request.
Nonprofit building open-source tools that let people get insights from data they cannot directly access or share.
Future of Privacy Forum explainer on Connecticut SB 5, the 39-section AI bill signed by Governor Lamont, summarizing its new requirements across several areas of AI policy.
A free tool that strips tracking parameters from links before you share them, so the people you send a link to aren't followed across the web. Paste a link, get a clean version back.
RaLHF essay on companies holding your personal data letting AI bots in, and why Apple's approach gets access others don't.
Why I recommend it: One writer's opinion piece.
Ben Hylak argues that as AI agents start negotiating with each other on our behalf, our privacy will depend on how well those agents handle social situations.
Why I recommend it: An opinion essay by a startup founder, not research. Good prompt for thinking about what you let an agent share.
OpenAI help article on Trusted Contact: an optional adult (18+) feature that may notify one person you choose if automated systems and trained reviewers detect a serious suicide-related safety concern.
Why I recommend it: Worth reading before you turn it on: it involves human reviewers reading flagged conversations and sharing an alert with someone else. OpenAI says it is not an emergency service. Not available in Business, Enterprise, or Edu workspaces.
A duty-by-duty walkthrough of California's automated decisionmaking technology rules — approved 23 September 2025, in effect from 1 January 2026, with ADMT obligations from 1 January 2027 — and where each duty can actually be enforced in a system. Covers pre-use notice, opt-out, human review, appeals and per-decision record keeping. The rules apply when computation replaces human judgment on a significant decision about work, money, housing, education or health.
Why I recommend it: The clearest free explanation I have found of what these rules require, and the section on significant decisions is directly relevant if an employer screens you by machine — you get notice, an opt-out and a route to a human. Read it knowing DeepInspect sells the kind of control it describes, so the framing pushes toward buying a product; the legal dates and duties are checkable against the state agency's own page, which it links.
A full AI assistant — writing, images, web search, memory, file uploads — where every conversation is end-to-end encrypted on your device, so the company says it cannot read your chats, train on them, hand them to partners, or produce anything but scrambled text in response to a subpoena. Built by Moxie Marlinspike, the cryptographer who created Signal. Free to start with no credit card; the encryption and private inference designs are written up publicly and the code is open source so the claims can be checked.
Why I recommend it: This is the one to reach for when you are about to type something into an AI that you would not want read back to you — money trouble, health, a manager, a visa problem. Two honest things. It is free to start, which is not the same as free forever, so read the plan page before you rely on it. And encryption protects the message, not your judgment: anything you paste in that belongs to an employer or a client is still their information, whoever can or cannot read it.
A free way to use several well-known chat models — including ones from OpenAI and Anthropic alongside open models like Llama and Mistral — without an account and without the model provider seeing who you are. DuckDuckGo strips your identity and passes the request on, and says the providers agree not to train on what goes through it. Supports image and PDF uploads, image generation and voice chat, with daily limits on the free tier.
Why I recommend it: The most frictionless privacy win on this list: no sign-up, nothing to cancel, and it takes about four seconds to start. Good for the everyday questions you do not want attached to a profile. Be clear about what it does and does not do — DuckDuckGo hides who you are from the model provider, but the words you type still travel to that provider's servers, so it is not the same as encryption or running a model on your own machine. There is a paid upgrade for higher limits.
Abid Ali Awan's 22 September 2026 walkthrough of seven open-source chat interfaces you can run on your own machine — starting with Open WebUI via Docker or Python connected to Ollama, llama.cpp or any OpenAI-compatible endpoint — and covering document assistants, agent platforms, multi-user team setups and full self-hosted AI workspaces. Each entry says what it is for and roughly what it takes to run.
Why I recommend it: Free to read, and the most useful starting point if you want AI without a subscription or without your files leaving your laptop. Set expectations honestly: running models locally needs a decent machine — a capable GPU for the larger ones — and the quality will sit below the paid cloud services. Every tool named here is on our Projects hub with a run-it guide, so read the article for the shape of the options and follow each project's own README for the actual commands.
A free, no-code recipe book of practical AI prompts built for nonprofit teams. Turn existing reports, events, and materials into slide decks, web pages, plain-language translations, social copy, and repeatable workflows. Every recipe includes a privacy badge so you know what stays on your computer, what goes public, and what connects to a vendor account.
Why I recommend it: Free to use. Built by Decoded Futures (a TechNYC program). The recipes are framed for nonprofit work, but the same patterns work for job searches, career content, and small-business tasks.
Independent cybersecurity and technology news site covering malware, ransomware, data breaches, privacy, and support guides for Windows, Linux and macOS.
From the site: BleepingComputer is a premier destination for cybersecurity news for over 20 years, delivering breaking stories on the latest hacks, malware threats, and how to protect your devices.
Why I recommend it: Free to read and ad-supported. Use it as a practical incident tracker and a source of plain-language security guidance, not as a single source for attribution.
Global nonprofit defending and extending digital rights for everyone.
From the site: Digital rightsfor everyone. Derechos digitalespara todas. .الحقوق الرقمية للجميع Droits numériquespour tous. Access Now defends and extends the digital
Independent technology journalism founded by Jason Koebler, Emanuel Maiberg, Samantha Cole and Joseph Cox. Covers tech, AI, privacy and internet culture.
From the site: 404 Media is an independent media company founded by technology journalists Jason Koebler, Emanuel Maiberg, Samantha Cole, and Joseph Cox.
Why I recommend it: Some articles may be behind a membership paywall; the homepage and many stories are free to read.
An open-source, self-hosted set of PDF tools — merge, split, sign, compress, convert — with no upload to somebody else's server.
From the site: #1 PDF Application on GitHub that lets you edit PDFs on any device anywhere - Stirling-Tools/Stirling-PDF
Why I recommend it: Do not upload your CV to a random free PDF site. Run this locally for the same jobs.
An open-source, self-hosted search engine that queries other engines without tracking you or building a profile. AGPL licensed.
From the site: SearXNG is a free internet metasearch engine which aggregates results from various search services and databases. Users are neither tracked nor profiled. - searxng/searxng
Why I recommend it: Useful if you research employers a lot and would rather not have that history tied to an account.
An open-source drop-in replacement for the OpenAI API that runs models on your own hardware, including CPU-only machines. MIT licensed.
From the site: LocalAI is the open-source AI engine. Run any model - LLMs, vision, voice, image, video - on any hardware. No GPU required. - mudler/LocalAI
Why I recommend it: Point existing code at your own server instead of a paid API — no code changes beyond the address.
A fast, dependency-light rewrite of OpenAI's Whisper speech-to-text that runs on ordinary laptop hardware, including CPU only. MIT licensed.
From the site: Port of OpenAI's Whisper model in C/C++. Contribute to ggml-org/whisper.cpp development by creating an account on GitHub.
Why I recommend it: Transcribe interviews or your own practice answers privately, without paying a per-minute transcription service.
An open-source desktop app that runs AI models entirely offline on your own computer, with an optional local API server. AGPL licensed.
From the site: Jan is an open-source alternative to ChatGPT. Run open-source AI models locally or connect to cloud models like GPT, Claude and others.
Why I recommend it: Install, download a model, unplug the internet — it still answers. That's the point.
An open-source desktop and self-hosted app that lets you chat with your own documents using local or hosted models. MIT licensed.
From the site: Stop renting your intelligence. Own it with AnythingLLM. Everything you need for a powerful local-first agent experience - Mintplex-Labs/anything-llm
Why I recommend it: Point it at your own files — job descriptions, notes, contracts — and ask questions of them without uploading anything to a company.
An open-source chat app you host yourself that talks to many model providers at once, with user accounts, presets and file uploads. MIT licensed.
From the site: Enhanced ChatGPT Clone: Features Agents, MCP, Skills, DeepSeek, Anthropic, AWS, OpenAI, Responses API, Azure, Groq, o1, GPT-5, Mistral, OpenRouter, Vertex AI, Gemini, Artifacts, AI model switching,...
Why I recommend it: Good for a small team who want one chat tool across several providers without paying per seat.
A self-hosted, open-source chat interface for local or hosted models — chat history, documents, multiple users. Works on top of Ollama or any OpenAI-compatible API.
From the site: User-friendly AI Interface (Supports Ollama, OpenAI API, ...) - open-webui/open-webui
Why I recommend it: If you like the ChatGPT window but not the subscription, this is that window running on your own machine.
Open-source software that downloads and runs open AI models on your own computer, with a single command and an OpenAI-compatible local API. MIT licensed.
From the site: Ollama is the easiest way to automate your work using open models, while keeping your data safe.
Why I recommend it: The easiest honest way to use AI privately — nothing you type leaves your machine. Start with a small model before you judge the speed.
A hands-on write-up of wiring Google's open Gemma 4 model into the Codex command-line coding agent so it runs locally instead of calling a hosted API.
From the site: I wanted to know whether Gemma 4 could replace a cloud model for my day-to-day agentic coding. Not in theory, in practice. I use Codex CLI…
Why I recommend it: Useful if you want to try coding agents without paying per token — local models are slower, but free and private.
Investigative reporter Yael Grauer writes on privacy, security, surveillance and the craft of tech journalism.
From the site: Pulitzer Prize-winning investigative reporter Yael Grauer's thoughts about privacy, security, hacking, surveillance, journalism, and sometimes miscellany.
Why I recommend it: Worth following if you care about surveillance and privacy work, or want to see how a reporter builds those stories.
Micah Lee's book on analyzing hacked and leaked datasets, free to read in full online alongside the print edition.
From the site: Buy Hacks, Leaks, and Revelations: The Art of Analyzing Hacked and Leaked Data by Micah Lee.
Why I recommend it: The whole book is readable free on the site — a practical intro to handling large datasets safely.
Security technologist Micah Lee's site — tools, writing and guidance for journalists, researchers and activists working safely.
From the site: Hi, I'm Micah. I help journalists, researchers, and activists stay safe and productive.
Why I recommend it: Follow him for practical security practice rather than theory, especially if your work involves sensitive sources.
A self-hosted, MIT-licensed AI agent with persistent memory that builds skills over time and reaches you on Telegram, Discord and other channels.
From the site: Self-hosted AI agent that remembers your projects, builds skills automatically, and reaches you on Telegram, Discord & more. MIT license. No tracking.
Why I recommend it: Free and open source, and it runs on your own machine — worth a look if you don't want your project context sitting on someone else's server.
A long-running peer-reviewed, fully open-access journal on the internet and society — platform power, digital labour, privacy, AI governance and online community research.
From the site: First Monday is one of the first openly accessible, peer–reviewed journals on the Internet, solely devoted to the Internet.
Why I recommend it: Free peer-reviewed research with no paywall — a good citation source when you need something stronger than a blog post.
Engineering and policy writing from Palantir on data platforms, government deployments, defence technology and how the company approaches privacy controls.
Why I recommend it: Read it critically — it is a company blog on a contested subject, which makes it useful primary material for understanding the industry's own arguments.
A Georgetown law-center project on privacy, records and what happens when everything is searchable.
Why I recommend it: Academic but readable work on privacy and searchable records.
An interactive map of surveillance technology companies, their funders and the governments that buy from them.
Why I recommend it: The clearest picture I have found of who sells surveillance tools and who pays for them.
A campaign encouraging people and institutions to reduce their dependence on a handful of large technology platforms.
Why I recommend it: Useful framing if you are trying to explain platform dependence to a non-technical audience.
A campaign toolkit on health data contracts, written for people organizing locally rather than for policy specialists.
Why I recommend it: A rare example of a plain-language toolkit about a data contract.
404 Media reports on leaked internal documents showing that human reviewers read ChatGPT prompts to improve OpenAI's models — including chats that hold sensitive personal information. Useful context before you paste private details into a chatbot.
A free plain-language guide to online safety, digital personas, scams and self-defense in online spaces.
Why I recommend it: Share this with anyone who is nervous about putting themselves online for work.
A Substack essay from Ruben on privacy, data ownership, and the human side of digital trust.
Why I recommend it: Personal take on privacy that connects policy to everyday choices.
Nonprofit behind the Signal messenger, publishing on private communication and surveillance.
Why I recommend it: Job hunting involves sharing a lot of personal data. Knowing your private-messaging options matters.
On-device AI with cloud fallback for smartphones, laptops, and edge devices, designed to cut inference costs by knowing when to hand off to frontier cloud models.
Why I recommend it: I am watching on-device AI closely because it could make powerful tools accessible at lower cost and with more privacy. Cactus is a useful example of the "know when to hand off" design pattern.
VentureBeat's report on a portable computer from Perplexity and NVIDIA that runs an AI agent entirely on-device, removing per-token API costs.
Why I recommend it: Local models matter for anyone handling private client data. Watch this direction if cost or confidentiality is a limit for you.
Free course from fast.ai covering disinformation, bias, privacy, algorithmic accountability, and the ethical questions data practitioners hit in real projects, taught by Rachel Thomas.
Why I recommend it: Finish this and you can speak credibly about AI risk in an interview instead of repeating headlines.
Report on how the datasets powering major AI systems depend on mass invasions of privacy by design.
Why I recommend it: Read this before you paste sensitive personal or client data into an AI tool.
Wired's weekly security roundup covers OpenAI, Anthropic, and 100+ companies cosigning a letter warning that organizations have mere months to prepare for AI-enabled cyberattacks. The piece also tracks rogue AI agent hacking incidents, attacks on over 100 U.S. water systems, license-plate-reader surveillance abuse, Meta's $16.7B child-safety settlement, and ICE buying robot dogs — a snapshot of where AI, surveillance, and critical-infrastructure security collide.
From the site: OpenAI, Anthropic, and more than 100 companies have cosigned a letter saying that everyone else has mere months to prepare for AI-enabled cyberattacks.
Why I recommend it: A stark signal that AI-enabled cyberattacks are no longer hypothetical. The cosigned letter from OpenAI and Anthropic calling for a 'collective response' is exactly the kind of industry accountability move worth watching — pair it with the Hugging Face incident reporting and the water-system attacks to see how AI agents are already being used offensively. Useful for anyone tracking the gap between AI capability and AI governance.
