Privacy foundation noyb files a complaint against OpenAI for possible violations of GDPR – IT Pro – News

Privacy foundation noyb has filed a GDPR complaint against OpenAI with the Austrian privacy regulator DSB. The case focuses on ChatGPT’s “hallucinations” and the inability for the chatbot to correct misinformation about individuals.

The privacy foundation noyb claims that ChatGPT provided incorrect information about the personal data of an unknown ‘public figure’. The chatbot repeatedly indicated that person’s wrong birthday. The AI ​​chatbot did not include an option to correct or delete that data. Under the GDPR, Europeans have different rights regarding their data. For example, Article 16 of the Privacy Act dictates the right to have incorrect personal data rectified.

Noyb also claims that OpenAI did not properly respond to information requests under the GDPR. The company also could not indicate what data it holds about the person, but Article 15 of the GDPR gives EU residents the right to see what data companies hold about them. “The obligation to grant access requests applies to all companies,” says a data lawyer from noyb.

The foundation is asking Austrian data protection authority DSB to investigate OpenAI’s data processing practices, in addition to the measures the AI ​​company takes to ensure data collected is accurate. Noyb also asks the regulator to order OpenAI to comply with the GDPR. The foundation is also asking for a fine for OpenAI to “ensure future compliance.” GDPR fines can amount to a maximum of four percent of global annual turnover.

Noyb, or ‘none of your business’, is the non-profit foundation of privacy activist Max Schrems. The organization previously filed several privacy complaints against, among others, Facebook parent company Meta and Google.