Italy bans ChatGPT over GDPR privacy concerns (Garante)
Date: 2023-03
Affected: OpenAI ChatGPT (EU/Italy)
Attack vector: data-exfiltration
Category: real-world
Severity: Medium

Italy's data-protection authority Garante temporarily banned ChatGPT in March 2023, citing the prior Redis breach, lack of legal basis for training-data collection and absence of age verification. ChatGPT was reinstated a month later after OpenAI introduced opt-out and age-gating controls.


Mitigations:

Architectural layers (MAESTRO):