Poland investigates ChatGPT for alleged privacy abuse

Poland's data protection authority the Urząd Ochrony Danych Osobowych (UODO) announced it was opening an investigation into OpenAI's ChatGPT for violating the privacy of Polish users.

The announcement of the investigation comes after a complaint had accused OpenAI and ChatGPT of multiple breaches of the EU’s General Data Protection Regulation (GDPR), including processing 'data in an unlawful and unreliable manner' and in a non-transparent manner. 

According to TechCrunch, the complaint was filed by local privacy and security researcher Lukasz Olejnik accusing OpenAI of a string of breaches concerning lawful basis, transparency, fairness, data access rights, and privacy by design. 

According to Olejnik, OpenAI had said it was unable to correct incorrect personal data about him, and had failed to respond properly to his subject access request, giving 'evasive, misleading and internally contradictory' answers when he had sought to exercise his legal rights to data access. 

Regulation ⚖️

• EU General Data Protection Regulation

Investigations, assessments, audits 🧐

• UODO (2023). Technologia musi być zgodna z RODO

News, commentary, analysis 🗞️

• https://techcrunch.com/2023/09/21/poland-chatgpt-gdpr-complaint-probe/

• https://www.dataguidance.com/news/poland-uodo-launches-investigation-chatgpt-unlawful

• https://www.reuters.com/technology/poland-investigates-openai-over-privacy-concerns-2023-09-21/

• https://thenextweb.com/news/poland-investigates-chatgpt-data-privacy-breach

• https://www.cpomagazine.com/data-protection/another-eu-investigation-for-chatgpt-following-poland-gdpr-complaint/

• https://www.cryptopolitan.com/poland-investigate-chatgpt-over-data-privacy/