Recent investigations reveal that OpenAI did not fully comply with Canadian privacy laws when developing and training ChatGPT. A joint review by federal and provincial privacy authorities found that the company collected and used sensitive personal information without proper safeguards or transparency. This has raised concerns about potential risks to Canadians’ privacy and safety.

Investigation Uncovers Privacy Violations

The privacy watchdogs from Canada, Quebec, British Columbia, and Alberta started looking into OpenAI in 2023 after complaints that the company unlawfully gathered personal data. Their review showed that OpenAI collected large amounts of personal information, including details about health, political views, and even children, without obtaining explicit consent or implementing adequate protections.

The authorities pointed out that many users were unaware their data was being used to train ChatGPT. They emphasized that this lack of transparency violates Canadian privacy laws, which require companies to get clear consent before collecting or sharing personal information. The investigation also highlighted that OpenAI lacked sufficient safeguards to prevent sensitive data from being misused during the training process.

OpenAI’s Response and Steps Forward

OpenAI disagrees with the findings, asserting that it mostly complies with privacy laws and takes responsibility for protecting user data. The company explained that it only uses publicly accessible information and employs filters to mask personal details. They acknowledged that users are increasingly using ChatGPT for personal and sensitive questions, and emphasized their commitment to improving privacy protections.

Following the investigation, OpenAI stated it has taken steps to enhance privacy measures and has committed to implementing further improvements. They published a detailed explanation of how Canadian data might be used in training models, stressing that they only utilize openly available information and are working to better detect and respond to threats or misuse.

Despite these efforts, privacy officials believe stronger laws are needed. The privacy commissioner of Canada pointed out that current laws are outdated for the rapid development of AI technology. He urged lawmakers to modernize regulations to better protect citizens’ privacy as AI becomes more integrated into daily life. This case underscores the importance of updating legal frameworks to keep pace with technological advances.

In the meantime, there are ongoing discussions about potential restrictions on AI and social media use, including possible age limits. Some political leaders have also called for reviews of privacy laws to ensure they are adequate for new digital challenges. The investigation into OpenAI’s practices predates recent tragic events, but it adds to the growing debate about how to regulate AI responsibly and protect personal data in Canada.

Inspired by

• https://www.cbc.ca/news/politics/privacy-investigation-chatgpt-open-ai-9.7188538

Sources

• radio-canada.ca