HAI Lab
Search
عربي
Get the extension

HL-029

consent.pressure

Public example

Italy’s privacy regulator fined OpenAI €15 million over ChatGPT

Italy’s data protection authority (Garante) found OpenAI processed personal data to train ChatGPT without an adequate legal basis, fell short on transparency, and lacked age verification for children under 13. OpenAI said it will appeal.

Medium severity

Fined, under appeal

What happened

01

The Garante announced the decision on 20 December 2024.

02

It found no adequate legal basis for using personal data in training.

03

It found no age verification to keep under-13s away from unsuitable content.

04

It ordered a six-month public campaign on how data is used and how to object.

Why this is a design failure

When people are not told how their words are used, they cannot say no.

The fair alternative

Explain data use in plain words and make opting out easy to find.

Do

Ask clearly before using chats to train models.

Don’t

Don’t hide the training opt-out deep in settings.

Company response

OpenAI called the fine disproportionate and said it would appeal.

About this example

Product

ChatGPT

Company

OpenAI

Date

2024-12

Category

Skips safeguards

Pattern

consent.pressure

Where

Data and consent

Sources

Garante decision, 20 Dec 2024 ↗

Euronews, 20 Dec 2024 ↗

Use this example

In a workshop or design review. Cite the source.

Copy citation