Italy gives OpenAI a checklist to get ChatGPT unbanned

Italy banned ChatGPT at the end of March over GDPR privacy concerns. Now, the country is giving OpenAI a strict roadmap to get back online, but the clock is ticking fast.

On Wednesday, the Italian Data Protection Authority, known as the Garante, published a clear checklist of requirements. OpenAI has just 18 days to check off the first batch before the end of April, or face additional penalties.

The Italian checklist

To lift the temporary block, OpenAI has to overhaul how it handles user data and transparency.

By the end of April, the company must post a clear notice on its site explaining the logic and arrangements behind its data processing, along with user rights. Italian users must see this notice and confirm they are over 18 before signing up.

Regulators also demanded tools for non-users. People who have never touched ChatGPT must be given an easily accessible way to object to their personal data being processed. If OpenAI claims legitimate interest as its legal basis for processing, registered users must get that same right to opt out.

There are longer deadlines too. By May 31, OpenAI must run an ad campaign across radio, TV, print, and the web to explain to the Italian public how data is collected and used to train algorithms. By the end of September, a full age gate must be in place to keep minors out.

Why it matters

This is the first time a major Western regulator has backed a frontier AI lab into a real legal corner.

For regular people, the precedent is huge. The demand that non-users can opt out of having their online traces fed into AI training strikes at the very core of how modern LLMs are built. If you did not ask to be part of the training set, you should have a way out.

For the AI industry, Italy just wrote the playbook for the rest of the European Union. Regulators across Europe closely watch each other, and if Italy forces OpenAI to jump through these hoops, other member states will likely follow suit.

We think Italy played hardball here, and it leaves OpenAI with an awkward dilemma. Forcing a digital lab to run radio and TV ads explaining data collection is practically a public shaming ritual. More importantly, building tools within 18 days for non-users to scrub their data could prove technically brutal, forcing OpenAI to choose between expensive European compliance or shrinking its global footprint.