European non-profit privacy organization Noyb filed a GDPR complaint against OpenAI on behalf of an individual regarding personal data issues with ChatGPT. The complaint focuses on the AI ​​chatbot’s inability to correct incorrect information it generates about people, which violates a core principle of the GDPR.

The anonymous complainant, who is a public figure, I found it ChatGPT has an incorrect date of birth listed for them. However, when they contacted OpenAI to fix the error, the company said it was technically impossible for the chatbot to correct this data due to limitations in the way its systems work.

OpenAI’s response left the complainant frustrated, as under the GDPR, people have it right to ask Correction of personal data held by an organization. Noyb’s complaint alleges that OpenAI is failing in its duty to ensure that users can access and correct their personal information as required by law.

Despite the fact that the date of birth of the complainant provided by ChatGPT is incorrect, OpenAI refused his request to correct or delete the data on the grounds that data cannot be corrected. OpenAI says it can filter or block data on certain guidelines (such as the complainant’s name), but not without preventing ChatGPT from filtering all information about the complainant.

The complaint also criticizes OpenAI for not disclosing where ChatGPT obtains people’s data and the exact personal information it holds about people. This lack of transparency, Nuev claims, violates GDPR guidelines regarding providing information to data subjects.

If regulators find OpenAI in violation of GDPR rules, the company could face fines of up to 4% of global revenue. There is also the possibility of enforcement actions, such as orders to change the way ChatGPT processes the data of EU residents.

In the past, Italy’s privacy watchdog briefly restricted access to ChatGPT in the country due to concerns about non-compliance. Now, the case has been handed over to Austrian regulators, who will investigate Neub’s claims.