The Italian Data Protection Authority (IDA) issued a statement on January 29, 2024, alleging that OpenAI’s popular AI chatbot, ChatGPT, is in violation of European Union General Data Protection Regulation (GDPR) and data privacy laws. This announcement comes after an extensive “fact-finding activity” initiated by the IDA in November 2023, primarily focused on investigating AI data scraping practices.
According to the IDA’s statement, their investigation found that ChatGPT does not adhere to the provisions outlined in GDPR, raising concerns about data privacy and protection. OpenAI has been given a 30-day window to respond and present any counterclaims or explanations regarding the alleged breaches.
The IDA also mentioned its intention to consider the findings of a task force formed by the European Data Protection Framework (EDPB), comprising national privacy watchdogs, in its final determination regarding OpenAI’s compliance with data protection and privacy laws.
This development stems from Italy’s initial ban on ChatGPT in March 2023, making it the first country in the world to take such action. The ban was prompted by a data breach that exposed personal user information. Subsequently, Italy faced criticism for its decision, and it later agreed to lift the ban on ChatGPT in April 2023, provided that OpenAI implemented various transparency measures.
Italy has been actively monitoring AI development and implementation within its borders. In May, the Italian government established a multi-million-dollar fund to support workers whose jobs might be at risk due to AI advancements while also promoting the development of digital skills among this group.
Additionally, Italy’s commitment to addressing AI regulation remains steadfast. As the host of the G7 presidency for 2024, Italy has declared AI regulation as one of its top priorities. Prime Minister Giorgia Meloni announced plans to convene a special AI-focused session for G7 members before the first leaders’ summit scheduled for June 2024. This initiative underscores Italy’s dedication to shaping responsible and ethical AI practices in the international arena.
OpenAI now faces a critical juncture in responding to the IDA’s allegations and working towards compliance with GDPR and Italian data protection laws. The outcome of this case will likely have a significant impact on the future of AI regulation in Italy and beyond.