Italy’s data protection authority, Garante, has fined OpenAI €15 million ($15.58 million) for improperly processing user data to train ChatGPT without a legal basis and for failing to provide transparency.
The investigation also revealed inadequate age verification, exposing children under 13 to inappropriate content. Additionally, OpenAI must run a six-month media campaign in Italy to inform the public about ChatGPT’s data practices.
OpenAI criticized the decision as disproportionate, claiming the fine exceeds its Italian revenue during the period in question. The company plans to appeal.
Garante emphasized OpenAI’s cooperative stance but justified the penalty under GDPR rules, which allow fines of up to €20 million or 4 percent of global turnover. The case reflects the EU’s active regulation of AI privacy compliance.
