OpenAI Faces GDPR Complaint Over ChatGPT’s False Murder Allegations

Privacy organization noyb filed a complaint with Norway’s Datatilsynet after ChatGPT falsely identified Arve Hjalmar Holmen as a child murderer. The complaint alleges that OpenAI breached the GDPR’s personal-data accuracy requirements and seeks deletion of the defamatory information, model fine-tuning, and an administrative fine. Following a model update that introduced internet searches for information about people, ChatGPT reportedly stopped repeating the allegation about Holmen; whether inaccurate personal data persists internally remains unresolved.

noyb also challenges OpenAI’s handling of access, correction, and erasure rights, arguing that disclaimers and output blocking do not fulfill its GDPR obligations. OpenAI separately publishes guidance on how data is used to improve model performance, but the supplied reference provides no policy details or evidence that Holmen’s underlying data was corrected or erased. The complaint highlights a governance risk for organizations using generative AI to research individuals: false personal information can create reputational harm and data-protection exposure even when subsequent outputs change.