Recently, the Italian Data Protection Authority (Garante) suspended OpenAI’s ChatGPT use within the Italy due to fears that its training and operations breach the General Data Protection Regulation (GDPR) of the European Union. To lift this restraint, Garante stipulated a list of steps which must be completed by OpenAI by the end of April.
This necessitates OpenAI producing a comprehensive notice to all potential users on their website with an explanation of the organization and rationale for all necessary data collection, along with specifying the privileges extended to those affected. In addition, each individual registering must acknowledge their age as above eighteen years old before continuing with registration. Moreover, it should also create simple to use tools allowing persons who are not users of ChatGPT to exercise their right to oppose further utilization of their personal data if legitimate interest is used as the acceptable basis for collecting such information.
Finally, by May 31st, OpenAI must advertise through radio, television, newspapers, and the internet an advertisement advising people concerning their approach to data aggregation and how Italians’ personal information will be employed to train the company’s algorithms.