Italian Data Protection Authority (Garante) — OpenAI
Closing its 2023 investigation, Garante fined OpenAI €15M for: (1) processing user data to train ChatGPT without an adequate legal basis, (2) failing to provide transparent information to users, (3) inadequate age-verification controls, and (4) not notifying the March 2023 breach within 72 hours. Garante also ordered OpenAI to run a six-month public awareness campaign explaining how ChatGPT works. Cited GDPR; substantively this is the closest thing to AI-Act-style enforcement of a generative AI service in the EU to date.
Key takeaway — how to prevent this
Algorithmic pricing tools that ingest competitors' data can expose you to price-fixing and antitrust liability — don't delegate pricing to a shared algorithm without competition-law review and genuinely independent decisions.
Inclusion does not imply wrongdoing or liability. Status reflects the latest information we have — always check the official source for current status.