Italian privacy watchdog opens investigation into OpenAI Sora
Date: 2025-04
Affected: Italian / EU users and depicted people
Attack vector: data-exfiltration
Category: real-world
Severity: Medium

Italy's Garante opened a formal GDPR investigation into OpenAI's text-to-video model Sora, citing risks of mass non-consensual deepfake generation, training-data legitimacy and impersonation of real people.


Mitigations:

Architectural layers (MAESTRO):