Lawsuitsby GlyphGarante fine: OpenAI, ChatGPT privacy case
Regulator
Italian Data Protection Authority
acted against
Against
Italy fined OpenAI over training ChatGPT on personal data without a legal basis and weak age checks. The Court of Rome upheld OpenAI appeal in March 2026.
The case
- Regulator
- Italian Data Protection Authority (Garante)
- Opened
- Mar 30, 2023 emergency order opening the investigation Source
- Decided
- Dec 20, 2024
- Status
- ClosedDecision set aside by the Court of Rome, 18 Mar 2026
- Outcome
- Fined EUR 15 million and a six month information campaign; annulled on appeal by the Court of Rome (judgment No. 4153/2026)
- Amount
- EUR 15 million
- Law tested
- GDPR on Regulations
History
3 dated entriesRelated cases
United States sued v. 
Cerebral (health data for ads)The FTC alleged the telehealth firm shared sensitive health data with third parties for advertising, failed to secure it and made cancellation difficult.$7 millionJury trialS.D. Fla.filed Apr 2024
Irish Data Protection Commission: GoogleThe Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location dataIrish DPCTimes Publishing Co. sued v. 
Microsoft and OpenAITimes Publishing Company alleges Microsoft and OpenAI used its newspaper content without a license to train and run AI products.S.D. N.Y.A.C. sued v. Altman (Tumbler Ridge)Lead case among about 30 coordinated suits by survivors and families of the Tumbler Ridge, British Columbia school shooting alleging OpenAI flagged the shooter's ChatGPT account but failed to warn police.N.D. Cal.Isbell sued v. 
SunoRecording artists including Jason Isbell and David Lowery allege Suno's generator reproduces their voices, names and likenesses without consent, pleading BIPA and state right-of-publicity claims.D. Mass.
Dutch DPA fine: Uber, automated driver deactivationThe Dutch DPA, working with the CNIL on a French drivers' complaint, found Uber used fully automated decisions to temporarily or permanently deactivate drivers over suspected fraud or low ratings and did not properly inform them.EUR 824,990,000Dutch Data Protection Authority (Autoriteit Persoonsgegevens)Sullivan sued v. 
OpenAIProposed class action alleging OpenAI trained on copyrighted works without permission; filed as a companion to Sullivan v. Meta in California.S.D. N.Y.Richner Communications sued v. MicrosoftThirty-five local and regional newspaper publishers representing about 400 outlets allege Microsoft and OpenAI copied their journalism to build AI products.S.D. N.Y.