A report has been adopted by data protection authorities on the work of the ChatGPT task force. This task force was created by the European Data Protection Board (EDPB) to promote cooperation among data protection authorities investigating the chatbot developed by OpenAI.
The report contains preliminary views on certain aspects discussed between DPAs and does not prejudge the analysis that each DPA will make in their respective ongoing investigations.
It analyzes various aspects related to the common interpretation of applicable AVG provisions relevant to the various ongoing studies, such as:
legality of the collection of training data ("web scraping"), as well as the processing of data for input, output and training of ChatGPT.
fairness: ensuring compliance with the AVG is a responsibility of OpenAI and not the data subjects, even when individuals input personal data.
data transparency and accuracy: the controller must provide appropriate information about the probabilistic nature of ChatGPT's output and make explicit reference to the fact that the generated text may be biased or fabricated.
The report points out that it is imperative that data subjects be able to exercise their rights effectively.
Task force members also developed a common questionnaire as a possible basis for their exchanges with OpenAI, published as an appendix to the report.
The report is in English. Download the report here.
Source: European Data Protection Board
