EDPB su ChatGPT: le domande aperte

L'analisi è riservata agli iscritti. Segui la newsletter dell'Osservatorio oppure il Podcast iscrizione gratuita 30 giorni

... ..:

.. ......... "...... .. ... .... .......... .. ... ....... ........." ....'.... ... .. ...... .... ........ ..'....... ........... ... ........... ... .... ......... .. ..... .. ...... ... ........ ... ........ ........

..... ......:

• ...............:.......'.... ....... ..... ..... ............... ... ........... ... .... ......... .. ..... .. ......, .. ........... ... ...... ........ .. ........ .. .... .. ............. ....... ... ........ . .'........ .. .... ......... ... .'............. ... ....... ............
• ...........:.......'.... .......... .'.......... ..... ........... ... ......... ..... ......, .. ........... .. ...... ...'........ ... .... ......... ....... .... ..... . ....... ... .'............. ... ........
• ........... ... ....:.......'.... ......... ... ....... ... ........ .......... ... ....... ............ ........, .. .......... ... .. ......... .. ........... ... .... .... ........ ...... ...........
• ....... ..... ...........:.......'.... ......... .. ................ .. ......... .... ...... .. ....... ...... .. ........ .. .... ....... .. ......... .. ........... ... .... .... ......... .. ..... .. .......
• .....................:.......'.... .......... .. ..................... .. ...... ... .. ........ ... ...., ..... .. ......... .. .... ......... ....... ..... ...... .... ..... . ........

.'.... ........ ... .. ........ .... .. ..... . ... ... ........ ...... ......... ....... ... ........... .......... ..... ................. .. ...... .. .....

......... ..... ......:

• .'.... .. ......... .. ...... .. ...... ... .......... .. ........ ......... ... ........... ... .... ......... .. ..... .. .......
• .'.... .. .......... .. ............ ...... ... .. ........, ... ........ ..... .......... .. ....... ............... .. ..........
• .'.... .......... .'.......... .. ........... .'........... ... .. .... . .'.. ... ....'...

.. ......... ......... .. ..... ..... ....'........ ... ....... ........... .. ...... .......... .. ......... .... .......... ... .... ......... . .......... .. ................ .. ..'....... ....... .. ..... ..... ............... .. ..........

...... (... ..):

..... .. ........

..........

1. ..........

2. ....... ..............

3. ........... .....

... ..........

..... .......... .. ........ ...., ...-.......... .. ... ...., ... ........

..... ....... ....., ......, ... ........

... ........

... ............ ... ........... ...........

... .... ........ ... ...... .. ... .... .......

1. ..... (.............)

... ... ........:

1. .. ... ........ ... .'............. .. ....... ........ ...... ... . ....... .............
2. ...... ........ .'........ .(.)(.) ... .... .... .... ...... ... .. ... .........
3. ........ .......... .......... ... ......... ......... .. ...... ... . ....... ... ........ ............
4. .. ........ ........, .... ...... ........ . ....... .. ........ ......., .... .........
5. ........ .......... ........ . .... ......... . .......... .'......... .. .... .......

..... ........... ... ....:

1. .. .......... ... .... ........ .......... .. ..... ....'........ .(.)(.) ... .....
2. .. ........... . .... .. ..... (........ ....... ... ........ . ....... ... ........ ........... .......) . ...... .. ...... (......... ..... ........... ... .......).
3. .'......... ... ........... ... .... ........ .......... ....... . ... ............... ....... ............ ............ .........
4. . ..... ..... ...... .............. ... ......., .'......... ....... ...'............. .......... ........ ...... ............ ....... . ..........
5. ........ .......... ....... ............ ........... ..... ............... .. ......... ....'...... .............. . ..... ... ........ ....................
6. ..... .. .... ...... .............. . ....... ............... ....'...... .. ......., ... .... ........... ... ......... .. .......... ... .....

N

Next, a report was adopted by the DPAs on the work of the ChatGPT taskforce. This taskforce was created by the EDPB to promote cooperation between DPAs investigating the chatbot developed by OpenAI.

The report provides preliminary views on certain aspects discussed between DPAs and does not prejudge the analysis that will be made by each DPA in their respective, ongoing investigation***.

It analyses several aspects concerning common interpretation of the applicable GDPR provisions relevant for the various ongoing investigations, such as:

• lawfulness of collecting training data (“web scraping”), as well as processing of data for input, output and training of ChatGPT.
• fairness: ensuring compliance with the GDPR is a responsibility of OpenAI and not of the data subjects, even when individuals input personal data.
• transparency and  data accuracy: the controller should provide proper information on the probabilistic nature of ChatGPT’s output and refer explicitly to  the fact that the generated text may be biased or made up.
• The report points out that it is imperative that data subjects can exercise their rights effectively.

Taskforce members also developed a common questionnaire as a possible basis for their exchanges with Open AI, which is published as an annex to the report.

Furthermore, the EDPB decided to develop guidelines on Generative AI, focusing as a first step on data scraping in the context of AI training.

Finally, the EDPB adopted a statement on the Commission's "Financial data access and payments package" (which includes the proposals for the Regulation on the framework for Financial Data Access (FIDA), on the Payments Service Regulation (PSR) and on the Payment Services Directive 3 (PSD3)).
The EDPB takes note of the European Parliament’s reports on the FIDA and PSR proposals, but considers that, with regard to the prevention and detection of fraudulent transactions, additional data protection safeguards should be included in the transaction monitoring mechanism of the PSR Proposal. It is important to ensure that the level of interference with the fundamental right to the protection of personal data of persons concerned is necessary and proportionate to the objective of preventing payment fraud.