![\"Exploring](\"https:\/\/marketingnewsbox.com\/wp-content\/uploads\/2023\/04\/exploring-italys-chatgpt-ban-and-its-potential-impact-via-sejournal-kristileilani.png\")
Screenshot from OpenAI, April 2023<\/span><\/div>\nOpenAI gave Italian users this message as a result of an investigation<\/a> by the Garante per la protezione dei dati personali (Guarantor for the protection of personal data). The Garante cites<\/a> specific violations as follows:<\/p>\n Effectively, an entire country lost access to a highly-utilized technology because its government is concerned that personal data is being improperly handled by another country \u2013 and that the technology is unsafe for younger audiences.<\/p>\n Diletta De Cicco<\/a>, Milan-based Counsel on Data Privacy, Cybersecurity, and Digital Assets with Squire Patton Boggs, noted:<\/p>\n \u201cUnsurprisingly, the Garante\u2019s decision came out right after a data breach affected users\u2019 conversations and data provided to OpenAI.<\/p>\n It also comes at a time where generative AIs are making their ways into the general public at a fast pace (and are not only adopted by tech-savvy users).<\/p>\n Somewhat more surprisingly, while the Italian press release refers to the recent breach incident, there is no reference to that in the Italian decision to justify the temporary ban, which is based on: inaccuracy of the data, lack of information to users and individuals in general, missing age verification for children, and lack of legal basis for training data.\u201d<\/p>\n<\/blockquote>\n Although OpenAI LLC operates in the United States, it has to comply with the Italian Personal Data Protection Code<\/a> because it handles and stores the personal information of users in Italy.<\/p>\n The Personal Data Protection Code was Italy\u2019s main law concerning private data protection until the European Union enacted the General Data Protection Regulation (GDPR) in 2018. Italy\u2019s law was updated to match the GDPR.<\/p>\n The GDPR was introduced in an effort to protect the privacy of personal information in the EU. Organizations and businesses operating in the EU must comply with GDPR regulations on personal data handling, storage, and usage.<\/p>\n If an organization or business needs to handle an Italian user\u2019s personal information, it must comply with both the Italian Personal Data Protection Code and the GDPR.<\/p>\n If OpenAI cannot prove its case against the Italian Garante, it may spark additional scrutiny for violating GDPR guidelines related to the following:<\/p>\n OpenAI offers legal reasons for processing personal information from European Economic Area (which includes EU countries), UK, and Swiss users in section nine of the Privacy Policy.<\/p>\n The Terms of Use page defines content<\/a> as the input (your prompt) and output (the generative AI response). Each user of ChatGPT has the right to use content generated using OpenAI tools personally and commercially.<\/p>\n OpenAI informs users of the OpenAI API that services using the personal data of EU residents must adhere to GDPR, CCPA, and applicable local privacy laws for its users.<\/p>\n As each AI evolves, generative AI content may contain user inputs as a part of its training data, which may include personally sensitive information from users worldwide.<\/p>\n Rafi Azim-Khan<\/a>, Global Head of Data Privacy and Marketing Law for Pillsbury Winthrop Shaw Pittman LLP, commented:<\/p>\n \u201cRecent laws being proposed in Europe (AI Act) have attracted attention, but it can often be a mistake to overlook other laws that are already in force that can apply, such as GDPR.<\/p>\n The Italian regulator\u2019s enforcement action against OpenAI and ChatGPT this week reminded everyone that laws such as GDPR do impact the use of AI.\u201d<\/p>\n<\/blockquote>\n Azim-Khan also pointed to potential issues with sources of information and data used to generate ChatGPT responses.<\/p>\n \u201cSome of the AI results show errors, so there are concerns over the quality of the data scraped from the internet and\/or used to train the tech,\u201d he noted. \u201cGDPR gives individuals rights to rectify errors (as does CCPA\/CPRA in California).\u201d<\/p>\n<\/blockquote>\n OpenAI addresses privacy issues for California users in section five of its privacy policy<\/a>.<\/p>\n It discloses the information shared with third parties, including affiliates, vendors, service providers, law enforcement, and parties involved in transactions with OpenAI products.<\/p>\n This information includes user contact and login details, network activity, content, and geolocation data.<\/p>\n To address concerns with data privacy and the GDPR, Microsoft created the Trust Center<\/a>.<\/p>\n Microsoft users can learn more about how their data is used on Microsoft services<\/a>, including Bing<\/a> and Microsoft Copilot, which run on OpenAI technology.<\/p>\n \u201cThe bottom line is this [the Italian Garante case] could be the tip of the iceberg as other enforcers take a closer look at AI models,\u201d says Azim-Khan.<\/p>\n \u201cIt will be interesting to see what the other European data protection authorities will do,\u201d whether they will immediately follow the Garante or rather take a wait-and-see approach,\u201d De Cicco adds. \u201cOne would have hoped to see a common EU response to such a socially sensitive matter.\u201d<\/p>\n If the Italian Garante wins its case, other governments may begin to investigate more technologies \u2013 including ChatGPT\u2019s peers and competitors, like Google Bard \u2013 to see if they violate similar guidelines for the safety of personal data and younger audiences.<\/p>\n \u201cMore bans could follow the Italian one,\u201d Azim-Khan says. At \u201ca minimum, we may see AI developers having to delete huge data sets and retrain their bots.\u201d<\/p>\n OpenAI recently updated its blog with a commitment to safe AI systems<\/a>.<\/p>\n Featured image: pcruciatti\/Shutterstock<\/em><\/p>\n\n
\n
What Is The GDPR?<\/h2>\n
How Could ChatGPT Break GDPR Rules?<\/h2>\n
\n
\n
\n
What About The CCPA, Anyway?<\/h2>\n
How Could This Affect Microsoft Usage In Italy And The EU?<\/h2>\n
Should Generative AI Users Worry?<\/h2>\n
\n