You On AI Field Guide · Arvind Narayanan The You On AI Field Guide Home
TxtLowMedHigh
PERSON

Arvind Narayanan

The Princeton computer scientist who drew the line the public conversation refused to draw—between the generative systems that write and draw and the predictive systems that claim to forecast a human life—and who made the case that AI is normal technology we can and should remain in control of.
Arvind Narayanan arrived at the criticism of artificial intelligence from a direction that makes his criticism unusually hard to dismiss: he is a computer scientist who builds the systems, breaks them, and reads the appendices that everyone else skips. His first fame came from privacy—he and his doctoral advisor took a dataset that a major corporation had released as anonymous and demonstrated that the supposed anonymity was hollow, by re-identifying individuals using nothing more than small amounts of publicly available auxiliary information. The lesson he drew was epistemic rather than merely technical: a confident claim had been made by people with every incentive to believe it, the claim was false, and almost no one had checked. That posture of disciplined skepticism toward confident institutional claims—paired with a faith that the claims can be tested and the systems can be governed—carried directly into his most consequential intervention in the AI debate. In AI Snake Oil (2024), written with his collaborator Sayash Kapoor, Narayanan drew a distinction so simple that its absence from the public conversation is itself a scandal: there are two fundamentally different technologies traveling under the single banner of artificial intelligence, and almost every confusion in the discourse can be traced to the failure to keep them apart. Generative AI produces text and images from patterns in training data. Predictive AI claims to forecast the future of a particular human being. The first is impressive and overhyped. The second is, in most of its consequential applications, something close to a confidence trick wearing the costume of science—and the people it harms are the job applicant filtered by a video, the patient denied coverage by a model, the defendant scored for risk by a system no one can audit, the people whose faces appear in no headlines because their harm is mundane and ongoing rather than dramatic and speculative. [YOU] on AI finds in Narayanan the calibrator the AI moment most urgently requires: the instrument that tells us not zero and not infinity but the true and difficult number in between.
Arvind Narayanan
Arvind Narayanan

In the [YOU] on AI Field Guide

The cycle's project is to see the machine clearly—without the narcotic of hype or the paralysis of fear—and Narayanan is the cycle's primary methodologist for this act of seeing. His contribution is not a philosophical framework or a historical analogy but a set of habits for testing claims that remain useful as the technology evolves: demand evidence proportioned to the claim, place the burden on the party that profits from belief, refuse to be moved by fluency, and redirect attention from the spectacular to the actual. The cycle applies these habits throughout its analysis of AI's effects on professional practice, creative work, and institutional decision-making—and particularly in its treatment of the tools that claim to predict human outcomes, which the cycle distinguishes sharply from the generative tools it advocates.

Narayanan's most structurally important contribution to the cycle is his account of broken institutions and the tools they adopt. The observation that broken AI is appealing to broken institutions—that the flawed automation does not succeed despite its flaws but because of what the institution is trying to avoid—reframes the entire conversation about AI governance. The problem is not that institutions are foolish; it is that they are broken in ways the technology lets them avoid confronting, and that the avoidance is the most expensive thing of all. Fixing the harms that predictive AI produces requires fixing institutions, not buying better software, and the cycle's recommendations for organizational adaptation draw directly on this insight.

The “normal technology” thesis—Narayanan's most ambitious reframing, developed in a 2025 essay with Kapoor—provides the cycle with its most important counterweight to both the rapturous and the apocalyptic accounts of what AI represents. If AI is a nascent species racing toward superintelligence, the central problem is alignment and the response may be drastic. If AI is normal technology—a powerful tool in the lineage of electricity and the internet, diffusing through society at the pace of society's capacity to absorb it—then it is something we can and should remain in control of, and the response is the ordinary, unglamorous work of governance rather than emergency measures premised on imminent loss of control.

Origin

Born in India and trained at the Indian Institute of Technology Madras, Narayanan took his doctorate at the University of Texas at Austin, did postdoctoral work at Stanford, and joined the faculty at Princeton in 2012, where he now directs the Center for Information Technology Policy. The biography matters because it establishes the credential that counts in his kind of argument: he has done the work he is evaluating. His doctoral research on the re-identification of supposedly anonymous datasets produced results of immediate practical consequence—demonstrating that the assurances of privacy through anonymization that companies routinely gave were, in high-dimensional datasets, mathematically unfounded—and established the intellectual posture that defines his career: a comfortable consensus examined by someone willing to do the technical labor of checking, and the consensus failing the check.

The work on anonymization and the work on AI hype are not two separate careers but one continuous investigation. The data economy that his early research exposed—vast accumulations of personal information whose supposed protections he had shown to be illusory—is the same economy that fuels the predictive AI systems he now criticizes. Both involve institutions making confident claims about what their systems can and cannot do, both involve the public lacking the literacy to evaluate those claims, and both demand the same remedy: evidence, transparency, and the right to understand and contest the systems that make consequential decisions about one's life.

The Fluency Trap
The Fluency Trap

AI Snake Oil crystallized two decades of this work into its most accessible and consequential form. Named to the inaugural TIME100 list of the most influential people in AI alongside Kapoor, the book achieved something rare in technology discourse: it gave the public a vocabulary precise enough to make the relevant distinction without requiring technical training. The nineteenth-century snake oil peddler did not sell empty water; he sold something real that produced a real sensation and came wrapped in the language of medicine, and the genius of the fraud was that you could not easily tell the tonic from the poison without knowing something the peddler was counting on you not knowing. Narayanan's claim is that contemporary predictive AI occupies the same position, and his project is to install the literacy that makes the distinction visible.

Key Ideas

The generative-predictive divide. Narayanan's central distinction separates two fundamentally different technologies that share a name and almost nothing else. Generative AI produces plausible continuations of patterns in training data; its failures are visible and correctable. Predictive AI claims to forecast what a particular person will do next; its failures are hidden behind the irreducible uncertainty of the future it purports to describe. The divide is not merely technical—it determines the kind of harm each technology produces, the kind of governance each requires, and the kind of evidence that can demonstrate either one's fitness for a consequential role. Collapsing the two under a single word allows the genuine achievements of generative AI to lend their credibility to the far more dubious claims of predictive AI.

The ceiling on life prediction. The most rigorous evidence in Narayanan's account comes from a large collaborative study in which hundreds of researchers were given an exceptionally rich dataset—thousands of families followed over many years—and challenged to predict outcomes. The result was humbling: the best models predicted life outcomes only slightly better than a simple formula using a handful of variables. The lesson is structural rather than contingent: human lives are shaped by contingency, by events that have not yet happened, by the free responses of the person being predicted to the very prediction being made. No quantity of historical data can encode a genuinely open future, and the difficulty of predicting life outcomes is not a temporary limitation of current models but a feature of the world that no AI architecture will overcome.

Broken AI, Broken Institutions
Broken AI, Broken Institutions

Broken AI for broken institutions. The most penetrating insight in Narayanan's account is institutional rather than technical. Flawed predictive systems persist not despite their inadequacy but because of what the institution is trying to avoid: a hiring process drowning in applications cannot read every resume, and the algorithm makes the unmanageable feel manageable. The prediction’s accuracy is almost beside the point; its function is to absorb a volume that the institution cannot otherwise face. The constructive implication is that fixing predictive AI harms requires fixing institutions—asking why the hiring process generates a thousand applications it cannot read, why the healthcare system rations care by formula, why the court needs an algorithm to tell it whom to fear. These are hard, political, expensive questions, and predictive AI is appealing precisely because it promises to make them disappear.

AI as normal technology. Narayanan's most ambitious reframing proposes that AI belongs in the same category as electricity, the printing press, and the internet—transformative general-purpose technologies that reshaped civilization while remaining, in the relevant sense, tools humans built, deployed, governed, and absorbed over time. The normal technology frame targets the dominant alternative, which treats AI as a nascent species racing toward superintelligence. The frame is not complacency: it insists that the harms Narayanan has documented are real and require serious response. But they are the harms of a powerful tool misused or misunderstood, not the harms of an alien intelligence, and the distinction matters enormously for what we do about them.

The anatomy of hype. Narayanan's sociology of AI hype identifies three mutually reinforcing sources: companies with every incentive to overstate capabilities and no incentive to disclose limitations; journalists operating under incentives that reward the dramatic over the accurate; and researchers whose failures of scientific rigor—chief among them data leakage and improper evaluation—generate inflated results that the press and companies broadcast. The benchmark score is the engine of the field's sense of progress, and Narayanan insists it is a narrow and easily corrupted indicator: what a system achieves on a curated test is not what it achieves in deployment, and the gap between demonstration and product is where most of the disappointment lives.

Debates & Critiques

The central debate Narayanan's work generates concerns his “normal technology” thesis and whether it underestimates the discontinuity of the current moment. Critics—including many who share his skepticism about specific AI claims—argue that the pace of capability improvement in large language models makes the electricity analogy misleading: electricity improved incrementally over decades, while AI capabilities have improved discontinuously enough to constitute a qualitative break. Narayanan's counter is that even granting dramatic capability improvements, the bottleneck is societal absorption, not capability itself, and that treating AI as a separate species actively harms governance by directing energy toward unfalsifiable speculative scenarios rather than the documented and present harms of deployed systems. A second debate concerns generative AI's reliability trajectory: Narayanan acknowledges generative systems are useful but insists their unreliability is intrinsic rather than incidental—a consequence of being a generator of probable text rather than a knower of facts—and that scaling alone will not convert plausibility into reliability. His critics among AI researchers argue that emergent capabilities at scale produce qualitative rather than merely quantitative improvements, and that the reliability ceiling he identifies is not fixed. The debate is genuinely open, and Narayanan's most important contribution may be less the specific conclusions than the method: the insistence that the burden of proof belongs on the seller, the evidence must take the form of real-world performance rather than benchmark scores, and the literacy to demand both can be taught.

The Calibrator's Triad

Three disciplines Narayanan installs in the careful reader
Discipline One
Divide the Technologies
Never allow generative AI and predictive AI to share a sentence without distinguishing them. The chatbot that drafts an email and the algorithm that scores a defendant for future criminality are different machines doing different things with different reliabilities, and the first step toward clarity is refusing to let one word stand for both.
Discipline Two
Demand Evidence, Not Demonstrations
A benchmark score is a demonstration. A product is what the system does in deployment among ordinary users with messy needs in conditions the demonstration did not anticipate. The burden of proving reliability falls on the seller, and the proof must take the form of evidence that the system improves real decisions about real people.
Discipline Three
Redirect Attention to the Actual
The harms that dominate coverage are dramatic and speculative. The harms that are actually widespread happen to specific people every day through mundane automated decisions and generate no coverage precisely because they are mundane and ongoing. Disciplined skepticism includes a deliberate correction of attention from the spectacular to the actual.

Further Reading

  1. Arvind Narayanan & Sayash Kapoor, AI Snake Oil: What Artificial Intelligence Can Do, What It Can’t, and How to Tell the Difference (Princeton University Press, 2024)
  2. Arvind Narayanan & Sayash Kapoor, “AI as Normal Technology,” Knight First Amendment Institute (2025)
  3. Arvind Narayanan, A Researcher’s Guide to Some Legal Concepts Around Tracking (Princeton CITP, 2017)
  4. Arvind Narayanan & Vitaly Shmatikoff, “Robust De-anonymization of Large Sparse Datasets,” IEEE Symposium on Security and Privacy (2008)
  5. Sayash Kapoor & Arvind Narayanan, “Leakage and the Reproducibility Crisis in Machine Learning-based Science,” Patterns (2023)
Explore more
Browse the full You On AI Field Guide — over 8,500 entries
← Home0%
PERSONBook →