Italy Fines OpenAI €15 Million for Privacy Breach

The Italian Data Protection Authority (DPA) has fined OpenAI €15 million for a user data leak, according to a statement from the regulator.

The agency’s investigation revealed that OpenAI processed personal user data to train AI models, violating transparency principles and related informational obligations.

In March 2023, there was a data leak that the startup did not disclose.

“Moreover, OpenAI did not implement age verification mechanisms, which could result in minors under 13 receiving responses inappropriate for their level of development and self-awareness,” noted the DPA.

OpenAI is required to launch a six-month public information campaign on radio, television, newspapers, and the internet to enhance “public understanding and awareness of how ChatGPT operates.”

Upon completion of the educational campaign, users should understand how to oppose the training of generative AI using their data, according to the Italian regulator’s representatives.

The fine was reduced due to OpenAI’s cooperation during the investigation, which began in March 2023.

Back in September 2023, the Polish regulator initiated an investigation into ChatGPT.