Canadian privacy commissioners flag concerns over OpenAI data practices in joint probe

Canada’s federal and provincial privacy commissioners have released a joint investigation report examining how OpenAI collected and used personal information to train its ChatGPT system, raising concerns about consent and transparency.

According to the Office of the Privacy Commissioner of Canada and counterparts in British Columbia, Alberta and Quebec, the company gathered more personal data than necessary during early development stages, in some cases without users’ knowledge or meaningful consent. The report states that this information could include sensitive details such as health data, political views and information related to children.

Federal Privacy Commissioner Philippe Dufresne said many users were not aware their data may have been used to train artificial intelligence models. The findings follow an investigation launched in 2023 into the company’s data handling practices.

The report notes that OpenAI has taken steps since the investigation began to address identified gaps and has agreed to implement additional safeguards. However, regulators said oversight will continue as the company’s technologies evolve.

Commissioners also called for stronger privacy laws to address emerging risks tied to artificial intelligence, signalling potential future policy or legislative action at both federal and provincial levels.