My CCPA Dialog with OpenAI (2023) (www.dbreunig.com)

A recent dialogue between Peter Breunig and OpenAI highlighted significant concerns regarding compliance with privacy regulations like CCPA and GDPR in the context of large language models (LLMs). Breunig's inquiry, initiated in February 2023, sought clarity on what personal data OpenAI uses for training its models and how it adheres to privacy standards. Over 101 days of back-and-forth exchanges revealed not only a lack of transparency in OpenAI's practices but also a troubling ambiguity about how the company handles potential personal data in training datasets. OpenAI's responses remained vague, raising further questions about their data handling and compliance mechanisms. This exchange sheds light on the broader implications for the AI/ML community, particularly as the industry navigates increasing regulatory scrutiny. Breunig's experience underscores the challenges LLMs face in ensuring user privacy, especially when models are trained on publicly available or scraped data. The uncertainty around whether sensitive data can be removed from training datasets, how compliance with legal requests is managed, and the nature of data used for training presents significant hurdles. The findings call for a reevaluation of transparency and accountability practices among AI companies, advocating for clearer guidelines on data governance and disclosure to mitigate risks related to privacy violations.