This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
A class-action lawsuit was filed against OpenAI alleging that the company unlawfully scraped massive amounts of personal data from the internet to train its AI models, including ChatGPT, DALL-E, and Vall-E. The plaintiffs argue that this practice violates privacy and property rights, as the data was used without informed consent or compensation. The lawsuit also raises concerns regarding the lack of safeguards for minors and the potential for AI to be used in ways that harm society.
OpenAI's products such as ChatGPT and DALL-E were alleged in a lawsuit using stolen private information from internet users without their informed consent or knowledge.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
AI systems that memorize and leak sensitive personal data or infer private information about individuals without their consent. Unexpected or unauthorized sharing of data and information can compromise user expectation of privacy, assist identity theft, or cause loss of confidential intellectual property.
Also classified as
The lawsuit claims OpenAI used copyrighted works without compensation, threatening professional obsolescence and devaluing human effort.
The reports highlight the lack of federal AI regulations in the US, forcing reliance on class-action lawsuits to establish safety guardrails.
The lawsuit alleges that OpenAI unlawfully scraped and obtained private, non-public sensitive information, including medical data and private conversations, to train its models without consent.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Pre-deployment
Occurring before the AI is deployed
The data scraping and training practices were human decisions made by OpenAI's management and developers prior to the deployment of the models.
A class-action lawsuit filed against OpenAI highlights significant privacy and data governance concerns regarding the unauthorized scraping of personal data to train AI models. While the scale of affected individuals is vast, the national security implications are minor and currently managed through domestic legal and regulatory channels.
The AI systems involved, such as ChatGPT, are described as conversational models that answer questions, provide information, and generate text on demand, which aligns with the Assistant behavior type.
Limited Risk: The systems involved are primarily chatbots (ChatGPT) and image generators (DALL-E), which are explicitly classified as limited risk under the EU AI Act, requiring transparency obligations.
The primary models targeted in the lawsuit are ChatGPT (a chatbot) and DALL-E (used for visual art generation).
The reports provide clear, detailed information about the class-action lawsuit, the specific legal claims (privacy violations, negligence, larceny), the AI models involved (ChatGPT, DALL-E, Vall-E), and the nature of the data scraping. There is high consensus across the sources regarding the facts of the filing.
The defense argues that scraping public internet data constitutes 'fair use' under copyright law, presenting an alternative legal interpretation of the same facts.
Technology
Lack of Safeguards and Controls
Products rushed to market without controls to stop harmful outputs.
Opaque Black Box Models
Immature technology whose internal workings and alignment are not understood.
Rapid API and Plug-in Integration
Embedding immature models into critical third-party apps and infrastructure.
Data Inputs
Mass Scraping Without Consent
Scraping 300 billion words of private social media data without permission.
Misappropriation of Child Data
Collecting personal info of minors without informed parent consent.
Lack of Data Opt-Out Mechanisms
Initially no way for users to opt out of their data being used for training.
Human Factors
User Trust in Unsecured Systems
Users inputting sensitive personal, financial, and medical data into chatbots.
Underage User Engagement
Children under 13 using the tools without proper verification or safeguards.
User Exposure to Defamation
Chatbots producing false information that wrongfully accuses users of fraud.
Process and Methods
Secret Harvesting of Web Data
Harvesting massive amounts of personal data secretly without notice to owners.
Deficient User Verification
Failing to verify user age or ensure children under 13 are not using tools.
Opaque Privacy Policies
Lack of clear, conspicuous disclosure on what data is collected and stored.
Management
Profit Prioritization over Ethics
Restructuring to a for-profit model, abandoning original safety principles.
Reckless AI Arms Race
Rushing products to market to beat competitors without testing safety risks.
Creating Economic Dependency
Embedding untested AI into society before understanding correlation failures.
Regulatory Environment
Lack of US Data Regulations
Absence of clear legal distinctions between public domain and free-to-use data.
Failure to Register as Data Broker
OpenAI did not register as a data broker as required under applicable laws.
Lack of Federal AI Guardrails
Government is a long way from being AI-ready with adequate federal oversight.
AI system involved
Identified by automated extraction; can differ from the alleged developers above.
