HAI Lab
Search
Arabic
Get the extension

HL-029

consent.pressure

Public example

Italy’s privacy regulator fined OpenAI €15 million, later annulled by a court

Italy’s data protection authority (Garante) found OpenAI processed personal data to train ChatGPT without an adequate legal basis, fell short on transparency, and lacked age verification for children under 13. OpenAI appealed, and a Rome court later annulled the decision.

Update, March 2026: a Rome court annulled the Garante’s decision.

Medium severity

Reported

Record

Observed or reported

2024-12

Product

ChatGPT

Model or version

Not stated in the source

Evidence

Public source, linked below

Last checked

1 November 2026

AI answers change between runs and versions. This shows what was reported on that date and may since have changed.

What happened

01

The Garante announced the decision on 20 December 2024.

02

It found no adequate legal basis for using personal data in training.

03

It found no age verification to keep under-13s away from unsuitable content.

04

It ordered a six-month public campaign on how data is used and how to object.

Why this is a design failure

When people are not told how their words are used, they cannot say no.

The fair alternative

Explain data use in plain words and make opting out easy to find.

Do

Ask clearly before using chats to train models.

Don’t

Don’t hide the training opt-out deep in settings.

Design guide for this case

If you're designing a general-purpose AI chat assistant

Interface

Before the first chat, show a clear choice screen asking whether chats may be used to train models, with equal-weight Yes and No buttons.

Words

In the content guide: "Explain in one plain sentence how chats are used and how to object. No legal jargon, no burying it in the terms."

Flow

Add an age check at sign-up that keeps under-13s out, and let users change their training choice from the chat screen in one step.

Metrics

Don't count opt-in rate as success. Track how many users can correctly say how their chats are used after onboarding.

Testing

Ask 8 new users to find and switch off model training. Time it and note anyone who gives up or can't find it.

Before launch

01

Do users choose about training before their chats are used?

02

Can the training opt-out be reached in one or two taps?

03

Does sign-up stop under-13s from getting in?

Cite this

About this example

Product

ChatGPT

Company

OpenAI

Date

2024-12

Category

Skips safeguards

Pattern

consent.pressure

Where

Data and consent