Malta is part of the EU. I am personally very surprised about this partnership, just in the context of data security, privacy and the GDPR. How is the privacy of these EU citizens protected when all their prompts and data is sent to OpenAI? How do these EU citizens submit a request for all their personal data to be deleted from OpenAI records, a right they have under the GDPR with a compliant data processor?
How is this any different than EU citizens accessing OpenAI, which is already available in the EU?
Nobody is obligated to use it. It just moves the price to $0 for people in Malta who choose to use it. Same service.
I’m very confused as to what you are asking here. Do you think OpenAI does not serve ChatGPT to EU users already under EU law?
- Malta is selling passports and harboring criminals who kill journalists (we all remember Daphne Caruana Galizia don't we?). - buying votes/parties there would get you 10 times the MEPs you get in Germany or France. - their mayors can veto EU policy... This EU-thing really is democratic!
so: I doubt anyone has to care about that pesky GDPR if they buy the government of Malta.
ChatGPT is already available to users in the EU. It already has an EU-aligned terms of service. Not that I'd trust them, because the GDPR has been borderline useless in reality, but there's nothing particularly legally interesting about this offering.
> How do these EU citizens submit a request for all their personal data to be deleted from OpenAI records
Probably by sending an e-mail to a designated address, like most services that operate in the EU, but you can read their TOS if you'd like to be sure.
> but there's nothing particularly legally interesting about this offering.
Care to elaborate or we have become completely apathetic to any display of sleaze?
I mean, it's just a literal non-event legally. I'm repeating myself here, but OpenAI already operates in the EU. EU users can already use ChatGPT, with some assurances about adhering to GDPR. Offering the ad-free tier to a subset of EU users for free, who could already use the tier with ads for free, doesn't change anything legally in regards to data processing.
If you want my commentary on the political context, obviously I think it's not very intelligent for nations to be trusting a US corporation with all of their citizens' data. I think the most impactful use of LLMs is going to be their usage as surveillance and propaganda tools, so this is probably not a prudent decision. But legally, as pertains to GDPR, this is not different from the status quo in any way.