Recently, the Italian data protection authority announced a €15 million fine on OpenAI's AI chatbot ChatGPT. This decision was made following an investigation launched in March 2023, which found that OpenAI violated privacy protection regulations in multiple areas. Image source note: the image is generated by AI, image authorized by service provider Midjourney. The investigation indicated that OpenAI made significant errors in handling personal data. Firstly, the company failed to promptly report data breach incidents.

The Italian Data Protection Authority (GPDP) recently issued a warning to local media group GEDI, indicating that its collaboration agreement with OpenAI, the parent company of ChatGPT, may violate EU privacy protection laws. According to this agreement, GEDI plans to provide its Italian language news content to ChatGPT subscribers, while OpenAI may use GEDI's news archives to enhance the accuracy of its products. The GPDP stressed that GEDI's digital archive contains a significant amount of personal information, including numerous details and even sensitive data.

The Dutch Data Protection Authority (DPA) has fined facial recognition technology company Clearview AI €3.05 million for violating relevant laws by collecting user images without consent. DPA Chairman Aleid Wolfsen pointed out that facial recognition technology is highly invasive, noting that images are collected without users' knowledge. Clearview AI claims that its services do not operate in the Netherlands and the EU, and therefore should not be subject to GDPR. The company's Chief Legal Officer stated that the fine decision is unlawful and unenforceable.

Social media platform X (formerly Twitter) faces privacy complaints from nine countries for using EU users' data without consent to train its AI chatbot Grok. The Irish Data Protection Commission expressed surprise at this behavior. Under the EU's General Data Protection Regulation, companies must have legal grounds to process personal data or face hefty fines. Complaints indicate X processed data from about 60 million EU users without clear noti....

Italy's data protection regulator has formally accused OpenAI of violating GDPR regulations with its developer ChatGPT. The accusation suggests that ChatGPT may have breached GDPR rules and could face hefty fines. OpenAI's method of training its chatbot by scraping data from the public internet may violate GDPR. The company has not obtained consent from millions of European citizens for processing their personal data and could face issues.

Privado.ai has launched MuroChat, an open source LLM chat application aimed at enhancing enterprise data protection. MuroChat can automatically detect and delete sensitive data in chat prompts, providing monitoring overviews and local chat histories. MuroChat is part of Privado.ai's open source products, helping innovative organizations protect personal data and intellectual property in new environments. The application integrates large language models to automatically detect and remove sensitive data, offering features such as data firewalls and single sign-on.

The UK data protection regulator has advised companies to prioritize individuals' privacy rights when using artificial intelligence (AI), or face potential fines and a loss of public trust in the technology. Information Commissioner John Edwards emphasized the need for companies to comprehensively safeguard customers' personal information while using AI, stating that violations of data protection regulations could lead to fines and possibly damage public trust. Global policymakers are increasingly concerned about the risks of AI, particularly following the rapid development of the technology after the release of ChatGPT by OpenAI, supported by Microsoft.