Regulatory Watch  /  Norway (EEA)  /  Enforcement
Moderate impactEnforcementFiled

noyb files second GDPR complaint against OpenAI over defamatory AI hallucinations in Norway

noyb filed a second complaint with the Norwegian Data Protection Authority alleging that OpenAI's ChatGPT generated false, defamatory personal data about a Norwegian user. The complaint cites violations of GDPR Article 5(1)(d) on data accuracy and Article 15 on the right of access. noyb requests deletion of the false output and a fine‑tuned model to prevent future inaccuracies.

Why it matters: The complaint highlights how AI hallucinations can breach GDPR obligations, prompting regulatory scrutiny of large language models.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
AI hallucinations: ChatGPT created a fake child murderer
noyb · primary source · Mar 20, 2025
AI hallucinations: ChatGPT created a fake child murderer
noyb · Mar 20, 2025
Details
JurisdictionNorway (EEA)
RegulatorNorwegian Datatilsynet
LawGeneral Data Protection Regulation
StatusFiled
PublishedMarch 20, 2025
Effectivenot stated
OrganisationsOpenAI, ChatGPT, noyb
Topicstransparency, correction, access, ai governance, privacy, automated decision making, children, deletion
Datapersonal, children