OpenAI, the artificial intelligence company, recently met with Italian data protection authority Garante to discuss requirements to lift the ban against the company’s ChatGPT platform. OpenAI has been instructed to take certain steps in order to comply with EU’s General Data Protection Regulation (GDPR). This includes measures such as transparency and protection of data subject rights, as well as implementing legal basis for the machine learning that relies on user data. The deadline for meeting requirements is April 30th.
OpenAI must create an information notice that outlines how ChatGPT processes user data, which should be reviewed by users before registering on the platform and listing the requirement to be 18 years or older. All references to contractual performance should be removed and instead rely on either consent or legitimate interest as the legal basis of processing data. To enable users to exercise their rights, OpenAI must also provide the means to correct or delete data generated by the algorithm.
In addition to the requirements, the Italian SA has asked OpenAI to verify and age gate users on the platform. OpenAI has been given until May 31st to provide a plan and until September 30th to implement it. An information campaign should be launched in collaboration with Garante also by May 15th, to inform people about the use of their personal data for machine learning training. The authority will continue its investigation to see if there are any other law violations, and may take further action if needed.
OpenAI is an artificial intelligence (AI) research laboratory based in San Francisco and currently associated with the research laboratory with CZI, the AI Foundation, and the Future of Life Institute. Sam Altman, the company’s CEO, attended the videoconference meeting with Garante on April 5th. OpenAI has already pushed the boundaries of AI and deep learning techniques and continue to push ahead.
