OpenAI Faces New GDPR Compliance Questions

A detailed complaint has been filed with the Polish data protection authority alleging that OpenAI, the maker of the ChatGPT generative AI tool, is in breach of the European Union's General Data Protection Regulation (GDPR).

The complaint, which TechCrunch has reviewed, argues that OpenAI is in violation of the GDPR in a number of ways, including:

• Failing to obtain lawful consent from users to process their data.
• Failing to be transparent about how it collects and uses user data.
• Failing to give users control over their data.
• Failing to take appropriate measures to protect user data from unauthorized access.
• Failing to implement privacy by design principles.

The complaint also alleges that OpenAI failed to consult with data protection authorities before launching ChatGPT in Europe, as required by the GDPR.

This is not the first time that OpenAI has been accused of violating the GDPR. In February, Italy's data protection authority ordered OpenAI to stop processing data locally until it addressed a number of compliance concerns. OpenAI has since made some changes to its practices, but it remains to be seen whether these changes will be enough to satisfy regulators.

The GDPR is a complex and far-reaching law, and it can be difficult for companies to comply with all of its requirements. However, the penalties for non-compliance can be severe, so it is important for companies to take steps to ensure that they are in compliance.

If you are concerned about your privacy when using ChatGPT or other AI chatbots, you should contact your local data protection authority. You can also file a complaint with the European Commission's Data Protection Supervisor.

Here are some tips for protecting your privacy when using AI chatbots:

• Read the terms of service carefully before using any AI chatbot.
• Make sure you understand how your data will be collected and used.
• Opt out of any features that you are not comfortable with.
• Be careful about what information you share with AI chatbots.
• Keep your software up to date.
• Report any privacy concerns to the chatbot's developer or to your local data protection authority.