The Privacy Guarantor of Open AI

Chat GPT admitted a conversation history feature had been leaking users chats and said it may have exposed some users payment information. Data breaches are another area the GDPR regulates with a focus on ensuring entities that process personal data are adequately protecting the information. overarching all this is the bigger question of what legal basis open AI has relied upon for processing European state in the first place aka the lawfulness of this processing. Yet at the least the now for profit company behind chat GPT does not appear to have informed people whose data it's repurposed to train its commercial ais which could be a pretty sticky problem for it.