London, January 29 – OpenAI, the company led by Sam Altman, has been notified by the Italian regulator about breaching European data privacy law. The Italian DPA (Garante) conducted a months-long investigation into OpenAI’s AI chatbot, ChatGPT, and subsequently identified breaches of data protection law. OpenAI has been given a 30-day period to respond to the allegations.
Last year, the Italian Garante imposed a temporary ban on OpenAI’s data processing, leading to the suspension of the AI chatbot in the market. Based on the findings of its fact-finding activity, the Italian DPA concluded that OpenAI had violated the provisions contained in the EU GDPR. The regulator stated that OpenAI can submit its counterclaims within the given time frame.
The Italian Garante will consider the work being done by the ad-hoc task force established by the European Data Protection Framework (EDPB) when making its final decision on the case. OpenAI has yet to provide a comment in response to the regulator’s report.
TechCrunch reports that confirmed breaches of the pan-EU regime can result in fines of up to 20 million euros or up to 4 percent of the company’s global annual turnover. Last year, the Italian authority expressed concerns about OpenAI’s compliance with the EU’s General Data Protection Regulation (GDPR), which prompted the temporary ban on ChatGPT’s local data processing.
As OpenAI faces these allegations, it recently announced a collaboration with Common Sense Media to develop AI guidelines and minimize AI risks for young adults. The partnership aims to enhance the responsible use of AI and ensure that young adults are protected from potential risks associated with these technologies.
OpenAI’s ChatGPT has captured the attention of many users worldwide due to its ability to engage in creative and informative conversations. However, this incident highlights the importance of data privacy and the need for companies to comply with regulations to protect the information of their users.
The Italian regulator’s actions demonstrate its commitment to enforcing data protection laws and holding companies accountable for any breaches. This case also serves as a reminder to other AI developers and technology companies to prioritize data privacy and take necessary measures to ensure compliance with relevant regulations.
It remains to be seen how OpenAI will respond to the allegations and whether any penalties will be imposed as a result of the breach of European data privacy law. The outcome of this case will likely have implications for the wider AI industry and the measures developers must take to ensure the responsible and ethical use of these technologies.
