gdpr artificial-intelligence computer
Is training an AI on the internet processing personal information?
<p><a href="https://www.theregister.com/2023/03/02/chatgpt_considered_harmful/#:%7E:text=I%20decided%20to%20test%20it%20for%20myself.%20Given%20I%20had%20never%20interacted%20with%20ChatGPT" rel="nofollow noreferrer">There is an article on El Reg</a> where the author asks ChatGPT about themselves, and they get back some information.  If this data acquisition and dissemination process was being performed specifically by a company it would clearly be a situation where the GDPR applies, and the company would have certain responsibilities.  However it seems probable that the actual design and implementation of ChatGPT was a bit higher level than that.</p>
<p>Does the GDPR apply to ChatGPT and the other chatbots that are in development around the world that are trained by reading the internet?</p>

<h2><a href="https://gdpr-info.eu/art-4-gdpr/" rel="nofollow noreferrer">Yes</a></h2>
<blockquote>
<p>‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, <strong>structuring,</strong> storage, <strong>adaptation or alteration,</strong> <strong>retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available</strong>, alignment or combination, restriction, erasure or destruction;</p>
</blockquote>
<p>ChatGPT, or more precisely the owner of Chat GPT, certainly does all the things in bold and probably some of the others as well.</p>
