According to Cointelegraph, Italy's data protection authority fined OpenAI $15.7 million and required it to conduct a six-month public awareness campaign.
The investigation found that OpenAI did not notify the authority about the data breach in March 2023 and processed user data without providing a legal basis, violating transparency principles.
Furthermore, OpenAI did not provide an age verification mechanism, which could allow minors under the age of 13 to access content that is not suitable for their development.
OpenAI will conduct public awareness campaigns in broadcasting, television, newspapers, and the internet to enhance understanding of ChatGPT's capabilities.
During the investigation, OpenAI moved its European headquarters to Ireland, making the Irish data protection authority the main regulatory body.