4 ms·
Meh. GDPR sets limits on 'processing' personally identifiable information. In the context of an LLM, its outputs may contain PII if its inputs do. Those inputs
by bux93 2y ago
Meh. GDPR sets limits on 'processing' personally identifiable information. In the context of an LLM, its outputs may contain PII if its inputs do. Those inputs are training input and prompts. So long(!) as the training input doesn't have PII, the output will only have it if the prompts do. Same as if you save a file on onedrive, if you save PII there, you're the data controller, and Microsoft is a processor on your behalf.
- Vuizur 2y agoIt is impossible to remove personal data ("any information which are related to an identified or identifiable natural person") from the LLM training data. As far as I understand it ChatGPT and all other similar systems are blatantly violating GDPR, they would have to for example publish their related training data to conform. I guess the EU authorities don't do anything for now because they don't want to admit that their funny law basically bans all state-of-the-art AI. (Ok, Openai also broke the law in almost all countries by downloading shadow libraries, but here they at least have more plausible deniability.)