Hacker News Reader

Comment by thefz | Hacker News Reader

I am actually very happy about this. If you like to have no protection over how big corporate treats your data as your own, and ingests whatever whenever they need to profit off your personal information, be my guest.

But I am happy to have a watchdog over my basic human rights.

> However, I often sense that in many places, the country seems to be entrenched in its medieval past.

It might be. But not on this front.

View on HN

You're talking about a website you have to specifically visit and type your personal information in to, which doesn't even ask for your name and which is simultaneously being accused of not knowing enough about you (your age). There is no "protection" needed here. If you don't like it, don't use it.

I don't use it.

Read the ruling. They are specifically referring to the data leak of some days ago that revealed personal information of GPT users that 1) was not explicitly collected and 2) was available to subjects that should not handle it (other users).

Then the Italian authorities will be pleased to know that the bug is already fixed, and thus there's nothing for them to do. Unless GDPR is now being interpreted as a general obligation to never write bugs, in which case, they will have plenty to do going after European firms because it's not like there's a shortage of buggy software in the world.

it may have been resolved, but while making the account I - Italian - did not give consent to the dissemination of MY data, and that is not in accordance with the GDPR

now I am not saying that they have to stop making use of my data, but at least notify me how and where my of phone is being used?

They do notify you and explain it:

https://help.openai.com/en/articles/6613520-phone-verificati...

This is also covered under the "consent" lawful basis part of the GDPR.

The bug is not a problem. GDPR covers data leaks. If you're an EU company you have to inform your DPA within 72 hours, and the users affected. It's not illegal to have such breaches. OpenAI isn't an EU company so doesn't have a DPA, but it did notify everyone that the leak occurred anyway.

yes ok, for the law though there had to be my assent communicated by active action because I could decide that I don't want it to be used for the purposes listed in that article and consequently not get the account

I still don't find the guarantor's request unimpeachable

They say they do the verification for "security reasons", which is a lawful basis and accepted justification under GDPR (it helps them control abuse and make bans stickier). You assented to it when you signed up.

> which doesn't even ask for your name

Nitpick: It asks for your name, email and phone number before you get to use it. Not to detract from your larger point, but people have expressed disappointment about the phone number part.

> If you like to have no protection over how big corporate treats your data as your own, and ingests whatever whenever they need to profit off your personal information, be my guest.

As long as they're transparent on what they're doing with the data I'm totally okay with it, nobody is forcing you to use ChatGPT.

This would be more believable if giant companies weren't already choking on every detail of every part of our lives just because you put a checkmark somewhere. Going after OpenAI seems like a move to pretend to still be relevant.

Hmmm, no. I am pretty sure giant companies had to adapt to GDPR, and any (found) violation is persecuted accordingly.

Yes, they added a dialog saying "we care about your privacy" and you said "SURE!".

ChatGPT is just a user interface over an underlying set of ai products that OpenAI has and that third parties use through an API to offer AI enhanced products. e.g. ChatGPT is banned but Bing and every other Microsoft product that integrates openai gpt model works perfectly. That move was just dumb and I suspect also political

I believe this is a totally commendable position but I also believe that you're naive about this ruling. I think this is the power classes freaking out someone might be eating their lunch or discovering their dirty secrets.

For example, what if some italians uses chatgpt and leak things you dont wanna know about italy? That, I believe would prompt otherwise slow-to-act politicians to jump off their rocking-chairs and start making some phone calls.

Not about your neck.

Just a guess.

That is taking conspirationism to a whole new level.

Okay lets take an example. Do you think the Vatican likes chatgpt?

Lets ask chatgpt what he think about sex:

"It is important to protect oneself during sexual activities to prevent the transmission of sexually transmitted infections (STIs) and unwanted pregnancies. Using condoms or other forms of contraception can greatly reduce the risk of transmission and unplanned pregnancy.

Additionally, it is important to communicate openly and honestly with sexual partners about sexual health and STI status, and to get tested regularly for STIs, especially if one is sexually active with multiple partners.

Ultimately, the decision to protect oneself during sexual activities is a personal one that depends on individual circumstances and preferences. However, it is generally recommended that individuals take steps to protect themselves and their sexual partners from potential health risks."

I especially liked the "multiple partners" part didnt you?

This is information you could find way before ChatGPT, it's nothing new. Internet is full of porn since its inception as well. So?

Besides, the Vatican has zero weight in decisions taken by the EU.

You are dreaming.

... what does the Vatican City State have to do with this decision from the Garante per la Protezione dei Dati Personali, an independent administrative authority of the Republic of Italy?

Reply on news.ycombinator.com