Data Privacy Hub

ChatGPT has prompted a flurry of governmental action as the revolutionary AI-powered chatbot had its first confirmed data breach in late March. Italy's data protection authority, Garante, had been the first major institution to push back against the OpenAI product back in early February when it banned ChatGPT from processing Italians' personal data, and now has moved beyond that, setting up an outright ban on the product.

Dramatic action, but none of the other European data protection authorities have moved in consolidation, making Italy's move more complicated to enforce.

Garante is concerned, among other things, about the lack of transparency in how ChatGPT works and process personal data. They are not alone in that concern, as Canada announced yesterday its Office of Privacy Commissioner had launched an investigation of the OpenAI chatbot in response to a complaint alleging ChatGPT collected, used and disclosed personal information without consumer consent.

Neither issue is likely to see a resolution in the immediate future, but it's worth keeping an eye on as governments try to react to the unprecedented speed at which ChatGPT is becoming a part of daily life.