Cybersec speaker Max Schrems and NOYB file complaint against OpenAI

William Visterin
26 March 2025
2 min

Cybersec speaker Max Schrems and NOYB file complaint against OpenAI

On May 21, privacy activist and lawyer Max Schrems will open Cybersec Europe. As founder of the non-profit organization NOYB (None of Your Business), Schrems is known for his legal battles against tech giants that violate privacy regulations. During his keynote, he will address the future of transatlantic data transfers. Meanwhile, NOYB is once again targeting a major tech company: OpenAI.

A few days ago, Austrian organization NOYB filed a complaint with the Norwegian Data Protection Authority against OpenAI, the developer of ChatGPT. The complaint stems from an incident of misinformation. ChatGPT falsely accused a Norwegian man of murdering his two sons and attempting to kill a third child.

ChatGPT mixed this fabricated accusation with accurate personal details, such as the man’s place of residence and family situation. According to NOYB, this is a clear violation of the GDPR, which requires personal data to be accurate and correctable.
“The GDPR is crystal clear,” says NOYB lawyer Joakim Söderberg in a comment to The Register. “Personal data must be accurate. And if not, users have the right to correct it.” NOYB criticizes OpenAI for claiming it cannot correct false information within its model. The only thing OpenAI can allegedly do is block certain data via input and output filters – a method NOYB claims is not GDPR-compliant.

Serious implications
This isn’t the first time OpenAI is under scrutiny. The company has previously been sued in the US and Australia for false accusations made by ChatGPT. The US Federal Trade Commission is also investigating OpenAI’s data policies.
NOYB’s complaint could have serious consequences. OpenAI could be forced to modify its model, restrict the processing of personal data, or pay a fine. Schrems and NOYB are once again taking legal action against big tech, focusing – as usual – on enforcing compliance with European privacy laws.

Keynote
Max Schrems’ keynote at Cybersec Europe on May 21 at 11:00 is titled “Data transfers in the new world order.” At Brussels Expo, he will discuss the future of data transfers between Europe and the US and the legal implications for European businesses, especially those relying on American cloud providers and AI solutions. With this latest NOYB complaint, Max Schrems has already drawn attention ahead of his appearance at Cybersec Europe.

Interested in cybersecurity insights? Attend one of the (free) Cybersec events!
Cybersec Europe returns to Brussels on May 21 and 22, offering a platform to connect with experts, discover the latest cybersecurity innovations, and gain valuable insights. This year we welcome keynote speakers such as Mario Beccia, Max Schrems, and Anouk van Brug. Registration is free and now open: Cybersec Europe Registration.

Later this year, Cybersec Netherlands takes place on September 10 and 11 in Utrecht. Registration opens in April, but you can already sign up to stay informed: Stay Updated.

Gerelateerde artikelen