ChatGPT has been at the center of attention lately due to its connection to privacy regulation. The Office of Privacy Commissioner of Canada (OPC) has launched an investigation into the company behind ChatGPT, OpenAI, in response to a complaint that OpenAI collects, uses, and discloses personal information without people’s consent.
In light of the investigation, Philippe Dufresne, the Privacy Commissioner of Canada, has expressed his office’s priority in regards to Artificial Intelligence technology and its implications for privacy. OpenAI is also being investigated by the Italian Data Protection Authority (Garante per la protezione dei dati personali). OpenAI was ordered to suspend the data processing of Italian users until the investigation has been resolved. This decision was made after a data breach had occurred regarding the conversations and payments of ChatGPT’s subscribers.
To uphold privacy, OpenAI has been instructed to develop specific measures to comply to the order of the Garante, and potentially face a hefty fine of up to €20 million. The Garante has also informed OpenAI to implement an age verification process to prevent access to ChatGPT by minors. Furthermore, France and Ireland have contacted the Garante to gain more information about their investigation, and Germany has proposed that ChatGPT could be banned. Spain has also asked the European Data Protection Board to assess the privacy issues in the EU.
Additionally, the U.S. Federal Trade Commission (FTC) has received a complaint from the civil society group Centre for AI and Digital Policy to open an investigation into OpenAI and suspend further deployment of GPT commercial products. The National Telecommunications and Information Administration is preparing a report on the safety of Artificial Intelligence systems.
OpenAI is a U.S. based company with the goal of solving intelligence that can be applied to a number of fields and topics. They aim to bridge the gap between current practices and the use of artificial intelligence to increase productivity and innovation. Philippe Dufresne, the Privacy Commissioner of Canada, has had a long career in the field of privacy and law. He is responsible for making sure Canadians’ rights to privacy are being upheld.
In order for organizations to protect themselves from potential risks, it is essential that organizations must be mindful of the collection and use of personal data when it comes to incorporating AI in their operations. Having legal and compliance measures in place beforehand is the best way to avoid any legal complications and hefty fines.
