The news from Italy and its temporary limitation of the processing by OpenAI of personaldata of Italian residents (re chatgpt and more) begs a few questions:
1) Did they just order that without prior contact?
2) Did they consider the OpenAI “privacy policy” – which I can see easily on the login/sign-up screen – was insufficient, or did they just choose to ignore its existence? (the order itself suggests “no information” is provided, which at first glance seems at odds with the fact that the privacy statement is there…)
If the answer to 1) is “no”, or if they ignored the existence of the privacy statement without examining it, is that truly the way GDPR enforcement should be carried out?
Looking forward to seeing how this case evolves…
Link to the order: https://lnkd.in/eBUTKiyr
Did this analysis get you thinking? Reach out!
DataLaws.net is entirely open-access, and instead of getting your data in exchange for this content, how about another trade? If this commentary saved you research time or sparked an idea, feel free to invite me over for tea, chai or a hot chocolate next time you are around Brussels or Antwerp - or invite me over to your offices for a chat!
Get in touch ↗ Let's connect on LinkedIn ↗