Loading
Temporary ban 30 March to 28 April 2023; €15M fine and six-month public awareness campaign ordered December 2024 (first GDPR fine for a generative AI company). On appeal, the Court of Rome annulled the fine in March 2026 on jurisdictional grounds (one-stop-shop lead-authority mechanism) without ruling on the substantive GDPR merits; the Garante may pursue a further appeal.
ChatGPT lacked adequate lawful basis for training data collection, no effective age verification, and inaccurate hallucinated personal data about real individuals. Set the EU DPA enforcement template adopted by France, Spain, and Ireland.
ChatGPT lacked adequate lawful basis for training data collection, no effective age verification, and inaccurate hallucinated personal data about real individuals. Set the EU DPA enforcement template adopted by France, Spain, and Ireland.
Temporary ban 30 March to 28 April 2023; €15M fine and six-month public awareness campaign ordered December 2024 (first GDPR fine for a generative AI company). On appeal, the Court of Rome annulled the fine in March 2026 on jurisdictional grounds (one-stop-shop lead-authority mechanism) without ruling on the substantive GDPR merits; the Garante may pursue a further appeal.
This summary is provided for general information and is not legal advice. Enforcement outcomes can be appealed or revised; verify the current position against the primary sources above.