Canadian Privacy Regulators Conclude Joint Investigation into OpenAI’s ChatGPT

A joint investigation by the Privacy Commissioner of Canada and provincial regulators in Quebec, British Columbia, and Alberta found that OpenAI initially trained ChatGPT in ways that did not comply with Canadian privacy laws, according to the Office of the Privacy Commissioner.

The investigation identified issues including overcollection of personal information, lack of valid consent, limited transparency, and insufficient mechanisms for users to access, correct, or delete their data. Regulators also cited a lack of accountability for how personal information was handled during ChatGPT’s early development.

In response, OpenAI has reduced the amount of personal and sensitive information used to train new models and committed to better informing Canadians about ChatGPT’s data practices. The federal commissioner found that these steps, along with upcoming changes, address the concerns raised under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

The Privacy Commissioner stated that his office will continue monitoring OpenAI’s actions to ensure ongoing compliance and protection of Canadians’ personal information.