News-Google-Chrome-Gemini-Nano-Privacy-May-2026

May 7, 2026 — Privacy researchers revealed that Google Chrome has been silently downloading a 4 GB AI model (Gemini Nano) to hundreds of millions of users' devices without consent, notice, or functional opt-out, raising significant legal questions under EU and U.S. privacy law.

The Discovery

Privacy researcher Alexander Hanff discovered that Chrome silently installs a weights.bin file (~4 GB) containing the Gemini Nano on-device LLM. In forensic testing, a fresh Chrome profile with zero human interaction accumulated 4 GB of model data within 14 minutes of creation. The file is stored in an OptGuideOnDeviceModel directory within the Chrome user profile and is automatically re-downloaded if deleted by the user.

Chrome's own Local State JSON confirmed the model was validated and run, with Chrome profiling the device's GPU and VRAM to determine eligibility — all before any AI feature was surfaced to the user.

The AI Mode Pill Deception

Chrome 147 displays an \"AI Mode\" pill in the omnibox, which Hanff argues creates a misleading impression. Users who discover the 4 GB on-device model would reasonably infer that AI Mode processes queries locally — but AI Mode is actually a cloud-backed Google Search Generative Experience that sends every query to Google's servers. The on-device Nano model is not used by AI Mode at all; features that do use it (Help Me Write, tab-group suggestions, smart paste) are buried in context menus most users never find.

Legal Implications

Hanff identifies three EDPB deceptive design pattern violations under Guidelines 03/2022:

• Misleading information — the \"AI Mode\" label creates a false impression about where processing occurs
• Skipping — no moment for users to choose between local-only and cloud-backed AI
• Hindering — turning AI Mode off does not remove the on-device model, and removing the model requires discovering hidden chrome://flags or chrome://settings/ai pages

The installation may violate the EU GDPR and ePrivacy Directive by processing data (hardware profiling, model installation) without a valid legal basis. Hanff notes that a German administrative court ruled in March 2025 that Google Tag Manager requires explicit consent under the TTDSG and GDPR, establishing precedent for treating browser-installed code as requiring informed user consent.

Google's Response

Google has stated that the on-device model \"has been there since 2024\" and that users can \"turn off and remove\" it through settings. However, critics note that the default is on, there is no consent dialogue, and Chrome re-downloads the model if users delete it — making the removal pathway effectively unusable for non-technical users.

Environmental Impact

Hanff estimated that at Chrome's ~3.5 billion user scale, the aggregate 4 GB download represents approximately 14 exabytes of data transfer, with significant carbon emissions equivalent to the annual output of multiple countries.

See Also

• May 7, 2026 — Daily Digest