← All stories

Unverified. We have not been able to confirm the details of this account.

Reported The Forgotten Constraint Costly

Canadian privacy regulators find OpenAI’s initial ChatGPT training non-compliant

On 6 May 2026, the Office of the Privacy Commissioner of Canada announced the results of a joint investigation with Quebec’s Commission d’accès à l’information and the information and privacy commissioners of British Columbia and Alberta into OpenAI’s collection, use, and disclosure of personal information for developing ChatGPT. The four regulators concluded that the way OpenAI had initially trained ChatGPT was not compliant with their respective privacy laws. Issues identified for that ...

Light abstract: teal shield outline with amber dashed data stream escaping through a gap.
Illustration generated with cursor-generate-image.
Watch for

Training and deploying a general chatbot at scale treated privacy-law limits on collection, consent, accuracy, access, and accountability as after-the-fact constraints — a forgotten constraint that Canadian regulators later found the initial practice failed to meet, with remediation still under moni

On 6 May 2026, the Office of the Privacy Commissioner of Canada announced the results of a joint investigation with Quebec’s Commission d’accès à l’information and the information and privacy commissioners of British Columbia and Alberta into OpenAI’s collection, use, and disclosure of personal information for developing ChatGPT. The four regulators concluded that the way OpenAI had initially trained ChatGPT was not compliant with their respective privacy laws. Issues identified for that initial training and deployment included overcollection of personal information; lack of valid consent and transparency; factual inaccuracies involving personal information; problems with individuals’ ability to access, correct, and delete their personal information; and accountability gaps. (news release; PIPEDA findings)

The announcement states that, during the investigation and in response to findings and recommendations, OpenAI implemented measures that better protect Canadians’ personal information, including significantly limiting the personal and sensitive information used to train new ChatGPT models, and committed to further steps. The federal Privacy Commissioner found the complaint well-founded and conditionally resolved under PIPEDA, pending monitoring of OpenAI’s ongoing measures. Each office applied its own statute; the news release notes that conclusions therefore varied across the four regulators. The detailed findings report (PIPEDA Findings #2026-002) scopes the investigation to ChatGPT and the GPT-3.5 / GPT-4 models in place when the probe launched, not later models as primary subjects of the non-compliance analysis. (news release; PIPEDA findings)

Has an AI ever done something you couldn't quite believe?

Good or bad. The disaster, the near-miss, the one that made you laugh, the one that turned out better than you'd any right to expect.

Tell us what happened

A person reads every submission. We publish your first name and your city — never your email or anything else. You can take it down whenever you like.