OpenAI GDPR Complaint
theregister.com
theregister.com
1. "The erasure request concerned specifically the data subject’s incorrect date of birth" and was "with regard to what data was used to train the algorithm"
2. "some data concerning him are online, his birthdate is not"
3. OpenAI offered filtering at inference, but noyb rejected this as it only applies "at the final output stage of the processing"
It's unclear to me what personal information they actually want erased. If his birthdate is not online, it won't have been in the training set (either accurate or inaccurate).
GDPR specifically carves out an exception, allowing companies to store data for the sole purpose of making sure it stays deleted. I don't think generally the idea is to store all the "deleted" data and scrub it from the output but just to store some key. E.g. it's permissible to store first name/last name/date of birth, so you can ensure a specific persons data does not accidentally re-enter a database.
So... maybe? There's something to be argued here for sure and I suspect we'll see that argument play out in court sooner or later.
Of course it is.