ChatGPT said to violate GDPR by not correcting inaccurate personal info
Date: 2024-04
Affected: EU data subjects
Attack vector: other
Category: real-world
Severity: Medium

Vienna-based NOYB filed a GDPR complaint arguing ChatGPT systematically fabricates personal information about identifiable individuals and provides no mechanism to correct inaccurate output, violating data-subject rights to rectification.


Mitigations:

Architectural layers (MAESTRO):