Italy’s data protection authority, the Garante per la Protezione dei Dati Personali (GPDP), has fined OpenAI €15 million ($15.6 million) after a nearly two-year investigation into the handling of personal data by ChatGPT.
In March 2023, Italy became the first Western country to temporarily block ChatGPT due to privacy concerns. The GPDP stated that OpenAI failed to notify the authority of a March 2023 data breach, processed users’ personal data without a proper legal basis, and violated transparency obligations regarding data use.
Additionally, OpenAI was criticized for not implementing effective age verification measures, potentially exposing children under 13 to unsuitable content.
Along with the fine, OpenAI has been instructed to conduct a six-month public awareness campaign across broadcast, print, and online platforms to educate users about ChatGPT and its use of data.
