DPO SchoolDPO School

Fine · Italy

OpenAI: EUR 15,000,000

Reviewed by Sergio Maldonado Elvira on 29 October 2026

Authority
Garante per la protezione dei dati personali
Country
Italy
Date
Decision of 2 November 2024
Amount
EUR 15,000,000, as imposed (not converted)
Appeal status
Annulled (source)
Provisions cited
The authority's published text cites no article numbers.

What the fine was for (summary, not the official text)

ChatGPT: training on personal data without an identified legal basis, lack of transparency, no age verification, and failure to notify a March 2023 breach; also ordered a six-month public information campaign.

Not fully confirmed: Read in the Garante press release of 20 December 2024 (decision no. 755 of 2 November 2024). The decision itself has been removed from the Garante's website after the Tribunal of Rome (judgment no. 4153/2026, published 18 March 2026) upheld the company's objection. 'Annulled' reflects the Garante's own note that the objection was upheld; whether a further appeal is pending was not stated.

Checked against the official source on 28 October 2026.

Only the authority's decision is authoritative. This is reference material, not legal advice.

All fines