The Italian Data Protection Authority has initiated a "fact-finding" investigation to scrutinize the security practices of public and private websites in Italy, focusing on preventing AI data scraping. The probe aims to assess the implementation of security measures against web scraping of personal data for training artificial intelligence (AI) algorithms. This move comes in response to concerns about various AI platforms engaging in large-scale data collection through web scraping. The fact-finding survey, involving both public and private entities, could lead to regulatory actions to safeguard privacy and prevent unauthorized data harvesting for AI purposes.

In a significant development, the Italian Data Protection Authority has announced a "fact-finding" investigation targeting the security practices of public and private websites in Italy. The primary focus of the probe is to curb the practice of AI data scraping, a process where personal data is harvested for training artificial intelligence (AI) algorithms. The investigation aims to verify the adoption of robust security measures to prevent unauthorized web scraping activities, particularly by AI algorithm manufacturers.


The fact-finding survey encompasses all public and private entities acting as data controllers in Italy or offering services in the country that make personal data freely accessible online. While the authority did not specify particular companies, it acknowledged the prevalence of various AI platforms engaging in web scraping to amass significant volumes of personal data. The regulatory body emphasized that, following the investigation, it would take any necessary measures, potentially including urgent actions, to address privacy concerns associated with AI data scraping.


This move by the Italian Data Protection Authority follows its earlier actions related to AI, notably banning the ChatGPT AI chatbot in Italy due to privacy breaches in March 2023. The authority has been proactive in addressing the intersection of AI and privacy, reflecting its commitment to safeguarding individuals' personal information in the digital age.


In July, Google faced legal challenges with a class-action lawsuit in the United States over its new AI data-scraping privacy policy, underscoring the global concerns surrounding the ethical use of personal data for AI training.


As part of the investigation process, Italian regulators have invited participation from AI industry experts, academics, and other stakeholders to share their insights or comments within a 60-day period. This collaborative approach aims to gather diverse perspectives and contribute to the formulation of effective regulatory measures.


The recent joint agreement between Italy, France, and Germany on future AI regulation further emphasizes the significance of international cooperation in shaping ethical standards and regulations for AI technologies. This collaborative effort is expected to lay the groundwork for similar discussions at the European Union level, fostering responsible AI practices across borders.


(SAVANNAH FORTIS, COINTELEGRAPH, 2023)