He emphasized that the absence of a legal framework around AI conversations means user data may be vulnerable.