The emerging risk from search engines and AI assistants

Search engines now integrate artificial intelligence features, and conversational assistants can search the Web, extract information and reformulate it in an answer. When a page contains personal information published as part of a doxxing incident, these systems may reproduce or summarise that information.

These tools do not all behave in the same way. Some have mechanisms intended to limit the disclosure of personal data, but their effectiveness and scope vary. Do not assume that an assistant will always recognise doxxing or refrain from repeating exposed information.

Why de-indexing is not always enough

Removing a page from one search engine's results does not remove it from the source website. It may remain accessible through a direct link, appear in another search engine, have been copied elsewhere or be available through third-party services. De-indexing remains useful, but should be part of a broader response.

Practical steps

• Act at the source: ask the website or platform to remove the information and, where possible, copies.
• Continue de-indexing requests: report relevant URLs to search engines.
• Report generated answers: use the service's feedback, reporting or privacy tools when personal data is reproduced.
• Keep evidence: save dated screenshots, URLs, service names and search terms.
• Monitor copies: check whether the information reappears elsewhere.

If your information appears in a search engine

Review the removal options offered by the search engine and contact the website responsible for the publication. Keep a record of each request and response. No measure can guarantee the complete removal of information that has already been copied, archived or reshared.