OpenAI has been found to violate Canadian privacy laws during the development of its highly popular ChatGPT tool. A collaborative investigation led by federal and provincial privacy commissioners revealed that OpenAI failed to comply with privacy regulations by collecting and utilizing sensitive personal data without consent.
The inquiry, initiated in 2023 following a complaint, highlighted several issues indicating OpenAI’s lack of adherence to both federal and provincial privacy statutes while training ChatGPT. The investigation exposed that OpenAI amassed significant amounts of personal data without adequate safeguards to prevent its exploitation for model training purposes. This data encompassed potentially sensitive information such as individuals’ health status, political beliefs, and details about minors.
Furthermore, the report unveiled that many users were unaware that their information was being gathered and utilized to enhance ChatGPT’s capabilities. The findings prompted Privacy Commissioner of Canada Philippe Dufresne to criticize OpenAI for neglecting to address known privacy concerns before launching the chatbot, putting Canadians at risk of privacy breaches and discrimination.
OpenAI disagreed with the investigation’s conclusions, asserting its compliance with privacy legislation to a large extent. However, in response to the probe, OpenAI committed to enhancing its privacy protocols and implementing additional measures to address the regulators’ concerns.
Despite these developments, Dufresne stressed the necessity to update Canadian privacy laws in light of the increasing integration of AI technologies into various applications. The investigation, which predates the tragic events in Tumbler Ridge, B.C., adds urgency to calls for regulations targeting AI chatbots. The lawsuits filed against OpenAI in California following the Tumbler Ridge incident further highlight the repercussions of inadequate privacy practices.
As discussions around potential age restrictions on social media and chatbots continue, Dufresne emphasized the importance of striking a balance between safeguarding children and promoting privacy in the digital age. He suggested prioritizing privacy protective measures over immediate bans to address underlying concerns effectively.