On 24 April 2023, the German State of Baden-Wuerttemberg's Data Protection Authority stated that it had requested information from OpenAI on ChatGPT’s data processing practices and operation in order to determine whether the application complies with the EU General Data Protection Regulation (GDPR). In particular, the Authority highlighted that every provider processing personal data is required to explain how the data is processed, the purpose of the processing, and the measures being taken to protect the rights of data subjects. In addition, the Authority stated that it is working towards a uniform approach at the European level and is working in coordination with the EU ChatGPT task force created by the European Data Protection Board (EDPB).
Original source