Italy: Italian Data Protection Authority investigation into OpenAI ChatGPT's data processing practices compliance with GDPR

Progress

Current status
under investigation
29 Jan 2024 under investigation
28 Apr 2023 in force
12 Apr 2023 under investigation
30 Mar 2023 under investigation

Scope

Implementers
Italy
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
ML and AI development
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

29 Jan 2024
under investigation

Issued notice of objection by Italian Data Protection Authority to OpenAI for potential data protection violations

On 29 January 2024, the Italian Data Protection Authority (DPA) issued a notice of objection to OpenAI, the operator of the ChatGPT artificial intelligence platform, for potential violations of data protection regulations. This follows a provisional…

Source
Event type investigation
Action type interim ruling
Government branch executive
Government body data protection authority
28 Apr 2023
in force

Announced reinstatement of OpenAI ChatGPT in Italy

On 28 April 2023, the Italian Data Protection Authority (DPA) announced that OpenAI’s platform ChatGPT had been reinstated after the company informed the DPA that it had implemented measures to comply with the requirements imposed by the DPA on 11 A…

Source
Event type investigation
Action type ruling
Government branch executive
Government body data protection authority
12 Apr 2023
under investigation

Announced possible suspension of order blocking OpenAI ChatGPT

On 12 April 2023, the Italian Data Protection Authority (DPA) announced it would suspend its order blocking OpenAI’s platform ChatGPT if the company complies with the requirements imposed by the DPA by 30 April 2023. In particular, the DPA has requi…

Source
Event type investigation
Action type interim ruling
Government branch executive
Government body data protection authority
30 Mar 2023
under investigation

Issued DPA order blocking OpenAI ChatGPT due to alleged non-compliance with data protection regulation

On 30 March 2023, the Italian Data Protection Authority (DPA) issued an order blocking OpenAI's platform ChatGPT from processing the data of Italian users with immediate effect. The DPA stated that it opened the investigation into the platform ChatG…

Source
Event type investigation
Action type interim ruling
Government branch executive
Government body data protection authority