A timely reminder that some nations do have laws that already apply to cutting edge AI has just been issued by Italy’s data protection authority, which has ordered OpenAI to stop processing people’s data locally with immediate effect. The order comes two days after an open letter called for a moratorium on the development of more potent generative AI models so regulators can catch up with companies like ChatGPT.
The maker of ChatGPT may be violating the General Data Protection Regulation of the European Union, according to the Italian DPA (GDPR).
The Guarante noted in particular that it has ordered ChatGPT to be blocked due to worries that OpenAI has improperly processed people’s data and also because there is no system in place to prevent children from using the technology.
The San Francisco-based corporation has 20 days to reply to the directive; failure to do so will result in serious consequences. (Remember that penalties for violations of the EU’s data protection regime can reach up to 4% of annual revenue or €20 million, whichever is greater.)
It’s important to note that any data protection body is permitted to take action under the GDPR if it identifies dangers to local consumers because OpenAI does not have a legal organisation established in the EU. (Therefore others might intervene where Italy does.
