The Californian non-profit company OpenAI, which develops and maintains the ChatGpt application, has been sanctioned by the Guarantor for the protection of personal data for the illicit collection of data from Italian users. L
'Authority has ordered the temporary restriction of data processing and opened an investigation into the matter.
Because the Guarantor imposed the block and the breach of March 20th
The provision of the Guarantor was issued following a data breach occurred on March 20th, during which the following were compromised:
- data relating to user conversations,
- data relating to the payment information of subscribers to the paid service.
In the document, the Guarantor highlighted the lack of clear and complete information to users and the absence of a legal basis justifying the massive collection and storage of personal data by OpenAI.
Furthermore, the Authority found that the information provided by ChatGpt they do not always correspond to the real dataresulting in inaccurate processing of personal data.
No age filter: ChatGPT also exposes minors
The absence of filters for the age verification of users is another critical issue reported by the Guarantor. Although the service is aimed at people over the age of 13, the Authority highlighted how the absence of any filter for verifying the age of users expose minors to inappropriate responses with respect to their degree of development and self-awareness.
What OpenAI needs to do and when will ChatGPT be restored
OpenAI, which is not based in the Union but has designated a representative in the European Economic Area, is required to disclose within 20 days the measures undertaken in implementation of what is requested by the Guarantor.
If not, he risks a fine of up to 20 million euros or up to 4% of annual global turnover.
