What happened

Meta started to install software to record U.S.-based employees’ mouse movements, clicks, keystrokes, and screen context so it can train AI agents to handle computer tasks more like humans do. 

Internally called the Model Capability Initiative (MCI), the software captures every keystroke, mouse movement, click, and periodic screenshots as employees work across hundreds of websites and apps, including Google, LinkedIn, GitHub, Slack, and even personal Gmail. 

There is no opt-out for employees using company-issued devices. European employees are exempt because GDPR won't allow it. 

However, the controversy intensified after Reuters reported that internal documentation indicated MCI would capture the contents of emails and direct messages sent to US employees, regardless of where the sender was located, raising questions about whether the programme could create compliance challenges under EU law. 

Why it happened

Meta's stated rationale is straightforward: if AI is supposed to act like a human using a computer, it needs real examples of how people actually work. The broader goal is to build AI agents capable of performing white-collar tasks on their own - the exact software Meta is racing to ship amid competition from OpenAI and Anthropic. 

The legal gap in the United States was a key enabling factor. US law is woefully behind in an age when most office work is done on a computer, and 'consent' is virtually meaningless when jobs are on the line. Under US federal law, there is currently no statutory limit on workplace keystroke surveillance on employer-owned devices.