Sunday, September 6, 2026

ChatGPT Service Back in Italy, After the Ban

Earlier this month, Italian SA raised a temporary ban for ChatGPT as there was a data breach in March 2023.

Along with this, the application had data privacy issues and lack of age affirmation which made authorities conclude this decision.

To remove this ban, Italian SA has provided certain conditions.

Compliance deadline – 30th April 2023

As per reports, the Italian SA is deciding to lift this temporary ban if ChatGPT includes certain policies which were similar to the CCPA (California Consumer Privacy Act).

The application must be transparent on how they use users’ data and must have a legitimate reason for using that data to train their AI.

Italian SA also said that users must be able to control their and must have the option to object to the usage of their data if they are no longer interested.

If and Only if ChatGPT does this, will it be allowed in Italy?

Information

The Italian SA also said that OpenAI must include a notice of their data arrangement on their website which explains how OpenAI uses the users’ data.

Before registration, users in Italy must be able to see these arrangements and comply with them.

In addition to this, ChatGPT must have an age affirmation that asks to confirm their age whether they are between 13-18.

Previously registered users must be notified of this when they access the application and must confirm their age. 

Italian SA did not want people under 13 years of age to use this service.

ChatGPT must not collect and use customers’ data on a contract basis. Instead, they must have a concrete reason to use users’ data.

This can either be permission from the user or a legitimate interest must be there for OpenAI.

Italian SA must also have the authority check and investigate this whenever they require.

Data Subject Rights

Italian SA also said that users of Italy must have the ability to correct their information whenever they need it.

If correcting their data is difficult, there must be an option for them to delete their personal data from OpenAI.

Non-users of ChatGPT must also have the option to object to ChatGPT from using their data even if OpenAI has a legitimate need or interest in using their data.

Under Age Protection Before 31st May

As stated earlier, Italian users must be provided with an age affirmation on the signup page which gets the users’ consent and age confirmation.

This must be available before 31st May and the plan for implementation must be there before 30th September 2023.

This helps the authorities to prevent users below 13 years of age and have parental authority for users between the age of 13-18 from using the service.

Awareness Campaign

As per reports, OpenAI must conduct an awareness campaign through radio, TV, newspapers, and the internet for informing users about their personal data usage by OpenAI.

Italian SA will be investigating continuously whether ChatGPT is breaking any laws or rules related to data protection.

They will try to fix if any breach of law happens or take different actions depending upon the circumstances.

Struggling to Apply The Security Patch in Your System? – 
Try All-in-One Patch Manager Plus

Hot this week

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

What is Deep Web The deep web, invisible web, or...

How to Build and Run a Security Operations Center (SOC Guide) – 2023

Today’s Cyber security operations center (CSOC) should have everything...

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

TeamViewer's popularity and remote access capabilities make it an...

Web Server Penetration Testing Checklist – 2026

Web server pentesting is performed under three significant categories: identity,...

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

ATM Penetration testing, Hackers have found different approaches to...

Chainguard Hits 1 Billion Build Manifests With AI-Powered Software Supply Chain Security

Chainguard has surpassed 1 billion container build manifests, doubling...

Russian Hackers Deploy New HOOKEDGE Backdoor in Espionage Attacks Across Europe

Russian state-sponsored threat actor BlueDelta, also tracked as APT28,...

New Panzer Ransomware Hits 16 Victims Across 11 Countries With Data Theft and Encryption

Panzer ransomware has emerged as a new Ransomware-as-a-Service (RaaS)...

12-Year-Old PostgreSQL Flaw Lets Attackers Execute Code and Take Over Database Servers

A critical PostgreSQL vulnerability dubbed PostGREShell could allow low-privileged...

Hackers Use Frontier AI Agents to Breach Enterprise Network in Under 10 Hours

A threat actor used frontier artificial-intelligence models and attack-specific...

CARS24 Data Breach Exposes 3,100 Customer Records, Leads Allegedly Sold for ₹1,000 Each

Used-car platform CARS24 has alleged that confidential information belonging...

Hackers Turn HiveMQ and Element Messenger Into Control Channels for Windows Backdoors

The financially motivated threat actor Toy Ghouls has expanded...

Related Articles

Recent News