Poland: Announced Data Protection Authority investigation into OpenAI ChatGPT's data processing practices

On 20 September 2023, the Data Protection Authority (UODO) of Poland opened an investigation into the data processing practices of the OpenAI platform ChatGPT. In a complaint currently under investigation by the UODO, it is alleged that OpenAI is processing personal data in an unlawful and opaque manner. Furthermore, the complaint alleges that OpenAI provides evasive and contradictory responses regarding its data processing practices, which violate the legality and transparency principles under the General Data Protection Regulation (GDPR). The complainant is seeking action from the UODO to ensure OpenAI complies with GDPR rights and to assess the compliance of OpenAI's model for personal data processing within ChatGPT with data protection regulations. The UODO stated that the investigation is being carried out in parallel with the work of the EU ChatGPT task force created by the European Data Protection Board (EDPB).