
No-one wants to reopen GDPR fundamentals but I am not clear can finesse it this time.”Įdwards is right that there’s no appetite among EU lawmakers to revisit GDPR’s basic definitions. Lilian Edwards, chair of technology law at the University of Newcastle, wrote in reply to Renieris, “These distinctions chafed when the cloud arrived, frayed at the edges with machine learning and have now ripped apart with large models. “will be impossible to enforce because data supply chains are now so complex and disjointed that it’s hard to maintain neat delineations between a ‘data subject, controller, and processor’ might try to leverage this).” Under GDPR, the privacy and data protection obligations differ significantly based on whether an organization is considered a controller of certain data, or merely a processor of it. and blockchain, wrote on Twitter that she suspected GDPR actions against companies making generative A.I. boom-all of which are trained on vast amounts of data scraped from the internet, including in some cases personal information-comply with GDPR.Įlizabeth Renieris, a senior researcher at the Institute for Ethics in AI at the University of Oxford who has written extensively about the challenges of applying existing laws to newly-emerging technology such as A.I. A number of European legal experts are actively debating whether any of the large foundation models at the core of today’s generative A.I. The office issued a checklist for companies to use to help ensure they are in compliance with existing laws.Ĭomplying with that checklist may be easier said than done. Meanwhile, here in the U.K., where I’m based, the data protection regulator followed Italy’s ban with a warning that companies could very well fall afoul of Britain’s data protection laws too if they weren’t careful in how they developed and used generative A.I. As this newsletter was preparing to go to press, there were reports Germany was also considering a ban. But Rome’s decision may be just the start of generative A.I.’s problems in Europe. Meanwhile, Italy’s deputy prime minster took the country’s data regulator to task, saying the ban seemed excessive. The comments drew plenty of snark from other Twitter users for its slightly tone deaf, ugly American vibes.

“We of course defer to the Italian government and have ceased offering ChatGPT in Italy (though we think we are following all privacy laws),” Altman tweeted, adding that “Italy is one of my favorite countries and I look forward to visiting again soon!” OpenAI immediately complied with the ban, saying it would work with Italian regulators to “educate them” on how OpenAI’s A.I. Italy temporarily banned ChatGPT last week on the grounds that it violates Europe’s strict data privacy law, GDPR.
