Italian authorities are delving into the realm of online AI practices. The Italian Data Protection Authority has initiated an investigative inquiry, aiming to examine how public and private websites handle their security measures to thwart AI data scraping.
Launched on November 22, this “fact-finding” mission seeks to scrutinize the security protocols implemented by websites, both public and private, to prevent the extraction of personal data for AI algorithm training through third-party web scraping tools. The objective is to hinder the gathering of extensive personal data utilized by “spiders” associated with AI algorithm developers.
The investigation encompasses all entities—public or private—acting as data controllers in Italy or offering services within the country that involve freely accessible personal data online.
While refraining from explicitly mentioning specific entities, the regulator expressed awareness of numerous AI platforms leveraging web scraping for amassing significant volumes of personal data. The authority affirmed its commitment to taking necessary measures following the inquiry, even on an urgent basis.
Italian authorities have extended invitations to industry experts, academics, and concerned parties to actively participate in the investigative process by sharing opinions or comments within a 60-day window.
This investigation follows previous actions by Italian privacy regulators in the AI landscape. Italy’s stringent stance led to the prohibition of the popular AI chatbot, ChatGPT, due to privacy violations earlier this year. Moreover, Italy earmarked substantial funds to support workers vulnerable to replacement by AI technology.
In recent developments, Italy, France, and Germany have laid the groundwork for future AI regulations, focusing on voluntary commitments for both large and small AI providers within the European Union. This collaborative effort is poised to influence forthcoming negotiations at the EU level.
