The reason was the violation of the General Data Protection Regulation, the organization announced on Monday. She accused OpenAI of making false statements regarding personal data in the case of a “public figure” without providing the legally required opportunity for correction or deletion.
Schrems had previously brought fear to the Facebook group Meta in two lawsuits and twice overturned important data agreements between the USA and Europe before the European Court of Justice.
In the dispute with ChatGPT developer OpenAI, Noyb accuses the US company of denying people in Europe their rights under the GDPR. In the specific case, which also involved an incorrect date of birth, OpenAI argued that it was not possible to correct the data. You can block data for certain requests, such as the name of the celebrity. However, you cannot prevent ChatGPT from filtering all information regarding the complainant.
Noyb further accused OpenAI of not responding appropriately to the complainant’s request for information. Although the GDPR gives users the right to request a copy of all personal data, OpenAI failed to disclose the data processed, its sources or recipients.
Request to data protection authority
Maartje de Graaf, data protection lawyer at Noyb, said the obligation to comply with a request for information applies to all companies. “It is of course possible to log the training data used to at least get an idea of the sources of information. It seems that with each ‘innovation’ another group of companies thinks that their products do not have to comply with the law.”
Noyb and the person concerned have now called on the Austrian Data Protection Authority (DSB) to investigate OpenAI’s data processing practices. Of particular interest is the question of what measures the start-up has taken to ensure the accuracy of personal data. A fine must be imposed on OpenAI to ensure future compliance with the regulations.
