Canadian officials have accused OpenAI of violating federal and provincial privacy regulations. Regulators cited excessive data collection and inadequate consent practices.
Canadian privacy authorities have formally alleged that OpenAI breached both federal and provincial privacy laws through its data handling practices.
The core complaints center on two issues: the scope of personal data OpenAI collected and the company's consent methodology. Regulators determined that OpenAI gathered more information than necessary and failed to properly obtain user permission before processing personal data.
The investigation represents a significant regulatory challenge to OpenAI's operations in Canada. Privacy frameworks north of the border impose strict requirements around data minimization and explicit consent—standards that differ from regulations in other jurisdictions where OpenAI operates.
The allegations underscore growing global scrutiny of AI companies' data practices. Multiple countries and regions have launched investigations into how generative AI firms collect, use, and store personal information. Canada joins the European Union and other nations in challenging OpenAI's compliance with local privacy standards.
Artificial intelligence is becoming adept at finding and patching software vulnerabilities, potentially undermining governments' ability to deploy spyware and hacking tools. The development could spark renewed pressure for backdoors in encrypted devices.
New York Governor Kathy Hochul responded to 3D-printed gun creator Cody Wilson's new tool designed to circumvent state firearms laws, pledging to stay ahead of legal challenges to the state's restrictions.
Chinese Fire Ant hackers have developed new techniques to turn Cisco IOS XR routers into covert surveillance platforms. Researchers discovered active GRE tunnel interfaces that left no trace in system configurations or commit histories.
Berlin's city administration has confirmed that the Rhysida ransomware gang stole data and is attempting extortion after listing the city on their data leak site.