noyb files GDPR complaints (C078, C097) over AI-generated inaccurate personal data

What happened

The privacy NGO noyb has lodged two complaints (C078 and C097) with Data Protection Authorities alleging that ChatGPT generated false personal data, including an incorrect date of birth and a fabricated criminal narrative. The complaints argue that OpenAI cannot adequately correct or erase the inaccurate outputs, testing GDPR obligations on accuracy, rectification and erasure. The cases remain pending as of the publication date.

Why it matters for trust and compliance

• Its status is pending. The case is still open; the outcome may change what it means.
• These complaints highlight how AI hallucinations challenge GDPR's accuracy and correction rights for individuals.
• It relates to GDPR. The regulations library explains what that law requires.

Who is affected

Recommended actions

1. Check that privacy notices describe the practices this addresses.
2. Confirm access, correction, deletion and opt-out requests are handled within the required time.