The Ibero-American Network of Data Protection Authorities ('RIPD') announced, on 8 May 2023, that it will coordinate an action into the ChatGPT service operated by OpenAI L.L.C.. In particular, the RIPD noted that ChatGPT may entail risks for the rights and freedoms of users in relation to the processing of their personal data, including aspects such as legal bases and information about processing, the exercise of data subject rights recognised in data protection regulations, the possible transfer of personal data to third parties without the owners' consent, the lack of age control measures to prevent minors from accessing its technology, and the lack of knowledge of whether it has adequate
News
International: RIPD announces coordinated action into ChatGPT
May 10, 2023
Summary
The Ibero-American Network of Data Protection Authorities (RIPD) announced a coordinated investigation into OpenAI L.L.C.'s ChatGPT service on 8 May 2023, citing potential risks to user rights and freedoms regarding personal data processing. Concerns include legal bases for processing, data subject rights, unauthorized third-party data transfers, insufficient age controls, and questionable security measures for data protection. The RIPD will monitor ChatGPT and coordinate actions within its network, advising users to review the service's privacy policy before providing personal data.