Italy’s Data Protection Authority has identified potential violations of EU data privacy regulations by OpenAI’s ChatGPT. The infractions were discovered during an investigative operation initiated with ChatGPT’s European launch.
Investigative Findings and Potential Consequences
Authorities have verified that evidence suggests non-compliance with the EU’s General Data Protection Regulation (GDPR). The breach appears to involve the collection of extensive personal data from users for the AI‘s training. OpenAI could face severe penalties, including hefty fines or operational limitations in Europe, if found non-compliant.
Previous Encounters and Ongoing Scrutiny
This is not ChatGPT’s first encounter with European data privacy regulations. Italy previously banned the service due to privacy issues but reinstated it after OpenAI addressed the concerns. Nevertheless, the platform remains under close observation, with regulators demanding stronger compliance measures, including age verification and opt-out options for data sharing.