Andorra: Announced Ibero-American Network coordinated action in investigation into ChatGPT data processing practices

On 8 May 2023, the Ibero-American Network for the Protection of Personal Data (RIPD) adopted coordinated measures regarding the investigation into OpenAI's platform ChatGPT data processing practices. The RIPD alleges that the ChatGPT platform may pose risks to users' rights and freedoms. The data protection authorities that are part of RIPD will asses the ChatGPT legal basis for processing personal data, compliance with transparency requirements regarding the processing, potential transfers of data to third parties without consent, age control measures and security measures adopted to safeguard the stored data. The data protection authorities will coordinate their actions within the framework of the network in their investigations.