Authority
Garante
Country
Italy
Date Issued
December 20, 2024
Industry
Technology
Summary
Italy's Garante fined OpenAI €15 million for collecting personal data without adequate legal basis and failing to provide transparent information about how data is processed in ChatGPT. The enforcement action addressed fundamental GDPR compliance failures in OpenAI's data handling practices.
Violation Types
Legal BasisData CollectionTransparency
Articles Violated
Art. 5 GDPRArt. 6 GDPRArt. 13 GDPR
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate GDPR compliance before regulators come knocking.
Talk to an Expert