Will OpenAI face enforcement action under the GDPR in 2023?

What is the likelihood of OpenAI facing data privacy enforcement under GDPR, according to privacy professionals?

In an informal Twitter poll, two-thirds of privacy wonks predict OpenAI will face data privacy enforcement, with one-third believing it will happen this year.

Responses ranged from

If people manage to successfully run an extraction attack on the model that results in the leakage of personal data that was not publicly accessible, then yeah, people are likely going to go after OpenAI. I can’t imagine other scenarios though.

To…

No, it won’t

It was also noted that some Data Protection Authorities chase the big fish and others (Spain, Italy) are more likely to chase all enforcement opportunities.

Worth bearing in mind if you are an indie maker or startup wrapping GPT responses which may include PII related to EU citizens.