According to the GDPR, this constitutes the creation of new personal data through inference as a result of profiling. Google had no legal basis (such as consent) for performing this operation. In legal terms, this is called unlawful data processing, which carries the highest categories of administrative fines under the GDPR.
If Google Search AI performed this automatically in my case, then it is doing the same to tens of millions of EU citizens.
The other extremely serious issue in AI Studio is the dark pattern:
I have demonstrated that Google misleads users about the function of the “Delete” button. The data is not actually deleted in the backend, and the model continues to learn from it. This constitutes consumer deception (consumer fraud).