EDPB ChatGPT Taskforce publishes the common European position on generative AI
EDPB took other action against OpenAI, L.L.C. over ChatGPT, announced 23 May 2024. No financial penalty was imposed. Status: confirmed.
The record
Key facts
- Record ID
- AIT-2024-0008
- Status
- Confirmed
- Action type
- Other
- Regime
- GDPR
- Authority
- European Data Protection Board
- Jurisdiction
- European Union
- Target
- OpenAI, L.L.C., headquartered in United States
- Sector
- Generative AI
- AI system
- ChatGPT
- Date announced
- Amount
- No financial penalty
- Appeal
- None recorded. Not applicable.
- Last verified
In full
What happened, and why it matters
Not an enforcement action, and included as context because it is the document the national authorities in this tracker are working from. After Italy's 2023 order, the European Data Protection Board set up a taskforce to coordinate the national investigations into ChatGPT and published its interim report on 23 May 2024. Three positions in it shape everything that followed. Publicly accessible data is not free data: web scraping for training requires a legal basis and legitimate interest has to survive a real balancing test with safeguards. Output about a named person falls under the accuracy principle, and a disclaimer that the system may be wrong does not discharge it. Transparency has to reach the people whose data was in the training corpus, not only the people using the product. The report deliberately did not resolve the hardest questions, and two years later they are still open. Its practical value for anyone reading this tracker is that it tells you what the next decision will argue before the decision exists, and it is the bridge between GDPR practice and the AI Act, because the Act's transparency and documentation duties assume a lawful basis for the data underneath and do not supply one.
At a glance
The four things to take away
- Interim report of the EDPB ChatGPT Taskforce, published 23 May 2024.
- Coordinates the national investigations into the same service across member states.
- Positions taken on scraping, accuracy of output about named people, and transparency.
- Context record. No enforcement measure and no fine attaches to it.
The law
Provisions this action rests on
- GDPR Article 5(1)(d)cited
- GDPR Article 6(1)(f)cited
How it moved
Timeline
EDPB establishes the ChatGPT Taskforce
Interim report published
Verification
Sources
Primary sources are the authority's own decision or press release, the Official Journal, or a court judgment. A record with no source is not published.
- EDPB, Report of the work undertaken by the ChatGPT TaskforcePrimary · 23 May 2024
Next
Related enforcement actions
- ConfirmedAI adjacentAIT-2023-0001
Garante orders ChatGPT off in Italy, then lifts the order four weeks later
30 March 2023 · Interim measure · GDPR · No financial penalty
Urgent temporary limitation adopted 30 March 2023, in effect 31 March 2023.
- AnnulledAI adjacentAIT-2024-0007
Garante fines OpenAI 15 million euro, and the Court of Rome annuls the decision in full
2 November 2024 · Fine · GDPR · 15 million euro
Fine of 15 million euro plus a media campaign order, decision 2 November 2024, announced 20 December 2024.
- ConfirmedContextAIT-2024-0002
noyb complains to the Austrian authority that ChatGPT invents facts about real people
29 April 2024 · Complaint · GDPR · No financial penalty
Complaint filed with the Austrian data protection authority on 29 April 2024.
- ConfirmedAI adjacentAIT-2025-0001
Garante blocks DeepSeek in Italy over transfers to China and missing information
30 January 2025 · Ban · GDPR · No financial penalty
Urgent definitive limitation on processing, adopted 30 January 2025.
- ConfirmedAI adjacentAIT-2024-0004
Irish DPC opens a cross border inquiry into Google over the PaLM 2 model
12 September 2024 · Investigation · GDPR · No financial penalty
Statutory inquiry announced 12 September 2024 under section 110 of the Irish Data Protection Act 2018.
Cite this record
Free to reuse under CC BY 4.0, with attribution. The record ID AIT-2024-0008 is permanent and is never reused.
- In a sentence
- According to the GAGE EU AI Act Enforcement Tracker (as of 20 August 2026), edpb chatgpt taskforce publishes the common european position on generative ai.
- APA
- GAGE (Global Academy of Generative-AI Education). (2026). EDPB ChatGPT Taskforce publishes the common European position on generative AI. EU AI Act Enforcement Tracker. Retrieved 20 August 2026, from https://www.gage.academy/tools/eu-ai-act-enforcement-tracker/actions/AIT-2024-0008-edpb-chatgpt-taskforce-report
- MLA
- "EDPB ChatGPT Taskforce publishes the common European position on generative AI." EU AI Act Enforcement Tracker, GAGE (Global Academy of Generative-AI Education), 20 August 2026, https://www.gage.academy/tools/eu-ai-act-enforcement-tracker/actions/AIT-2024-0008-edpb-chatgpt-taskforce-report.
- Chicago
- GAGE (Global Academy of Generative-AI Education). "EDPB ChatGPT Taskforce publishes the common European position on generative AI." EU AI Act Enforcement Tracker. Last modified 20 August 2026. https://www.gage.academy/tools/eu-ai-act-enforcement-tracker/actions/AIT-2024-0008-edpb-chatgpt-taskforce-report.
- Permalink
- https://www.gage.academy/tools/eu-ai-act-enforcement-tracker/actions/AIT-2024-0008-edpb-chatgpt-taskforce-report
Back to the full enforcement tracker, or see every action against generative ai and every action in European Union.
Last updated . Every record re verified . The tracker is checked every Monday, and the same day for any action under the AI Act.