3 ms·

You're talking about a website you have to specifically visit and type your personal information in to, which doesn't even ask for your name and which is simult

You're talking about a website you have to specifically visit and type your personal information in to, which doesn't even ask for your name and which is simultaneously being accused of not knowing enough about you (your age). There is no "protection" needed here. If you don't like it, don't use it.

thefz 4y ago
I don't use it. Read the ruling. They are specifically referring to the data leak of some days ago that revealed personal information of GPT users that 1) was not explicitly collected and 2) was available to subjects that should not handle it (other users).
- revelio 4y ago
  Then the Italian authorities will be pleased to know that the bug is already fixed, and thus there's nothing for them to do. Unless GDPR is now being interpreted as a general obligation to never write bugs, in which case, they will have plenty to do going after European firms because it's not like there's a shortage of buggy software in the world.
  - br1brown 4y ago
    it may have been resolved, but while making the account I - Italian - did not give consent to the dissemination of MY data, and that is not in accordance with the GDPR now I am not saying that they have to stop making use of my data, but at least notify me how and where my of phone is being used?
    - revelio 4y ago
      They do notify you and explain it: https://help.openai.com/en/articles/6613520-phone-verification https://help.openai.com/en/articles/6613520-phone-verificati... This is also covered under the "consent" lawful basis part of the GDPR. The bug is not a problem. GDPR covers data leaks. If you're an EU company you have to inform your DPA within 72 hours, and the users affected. It's not illegal to have such breaches. OpenAI isn't an EU company so doesn't have a DPA, but it did notify everyone that the leak occurred anyway.
      - br1brown 4y ago
        yes ok, for the law though there had to be my assent communicated by active action because I could decide that I don't want it to be used for the purposes listed in that article and consequently not get the account I still don't find the guarantor's request unimpeachable
        revelio 4y ago
        They say they do the verification for "security reasons", which is a lawful basis and accepted justification under GDPR (it helps them control abuse and make bans stickier). You assented to it when you signed up.
wsgeorge 4y ago
> which doesn't even ask for your name Nitpick: It asks for your name, email and phone number before you get to use it. Not to detract from your larger point, but people have expressed disappointment about the phone number part.

thefz 4y ago

I don't use it. Read the ruling. They are specifically referring to the data leak of some days ago that revealed personal information of GPT users that 1) was not explicitly collected and 2) was available to subjects that should not handle it (other users).

revelio 4y ago
Then the Italian authorities will be pleased to know that the bug is already fixed, and thus there's nothing for them to do. Unless GDPR is now being interpreted as a general obligation to never write bugs, in which case, they will have plenty to do going after European firms because it's not like there's a shortage of buggy software in the world.
- br1brown 4y ago
  it may have been resolved, but while making the account I - Italian - did not give consent to the dissemination of MY data, and that is not in accordance with the GDPR now I am not saying that they have to stop making use of my data, but at least notify me how and where my of phone is being used?
  - revelio 4y ago
    They do notify you and explain it: https://help.openai.com/en/articles/6613520-phone-verification https://help.openai.com/en/articles/6613520-phone-verificati... This is also covered under the "consent" lawful basis part of the GDPR. The bug is not a problem. GDPR covers data leaks. If you're an EU company you have to inform your DPA within 72 hours, and the users affected. It's not illegal to have such breaches. OpenAI isn't an EU company so doesn't have a DPA, but it did notify everyone that the leak occurred anyway.
    - br1brown 4y ago
      yes ok, for the law though there had to be my assent communicated by active action because I could decide that I don't want it to be used for the purposes listed in that article and consequently not get the account I still don't find the guarantor's request unimpeachable
      - revelio 4y ago
        They say they do the verification for "security reasons", which is a lawful basis and accepted justification under GDPR (it helps them control abuse and make bans stickier). You assented to it when you signed up.

wsgeorge 4y ago

> which doesn't even ask for your name Nitpick: It asks for your name, email and phone number before you get to use it. Not to detract from your larger point, but people have expressed disappointment about the phone number part.