Italian SA imposes temporary limitation on ChatGPT processing of Italian users’ data

Italian SA imposes temporary limitation on ChatGPT processing of Italian users’ data due to concerns over data breach, lack of user information, and potential risks to children. Open has 20 days to comply or face significant fines.

 Body Part, Hand, Person, Business Card, Paper, Text, Nail

The Italian Data Protection Authority (SA) has imposed an immediate temporary limitation on OpenAI’s processing of Italian users’ data. Previously, a data breach affecting ChatGTP users’ conversations and information on payments has been reported.

The SA highlights that OpenAI does not provide any information to users or data subjects whose data is being collected and that there is no legal basis for the massive collection and processing of personal data for the purpose of training algorithms. Furthermore, the lack of any age verification mechanism exposes children to inappropriate responses.

OpenAI has 20 days to notify the SA of its measures to comply with the order; otherwise, a fine of up to EUR 20 million or 4% of the total worldwide annual turnover may be imposed.