Canadian officials, including Privacy Commissioner Philippe Dufresne, have determined that OpenAI, the company behind ChatGPT, violated federal and provincial privacy laws during the training of its AI models. The investigation highlighted that OpenAI collected vast amounts of personal information without proper safeguards and failed to obtain consent as required by the Personal Information Protection and Electronic Documents Act (PIPEDA). The officials noted that while OpenAI had warnings in ChatGPT regarding data use, many users were unaware that their personal details might have been included in the datasets used for training. As a result of the findings, OpenAI has committed to making significant changes, including the introduction of a new notice about data use within three months and improvements to data export tools within six months. Additionally, the company will enhance protections for sensitive information related to minors and ensure that retired datasets cannot be used in future developments. OpenAI's scrutiny intensified following its connection to a mass shooting incident in Tumbler Ridge, British Columbia, where it was criticized for not escalating concerns about a flagged user account. The company has since agreed to work more closely with Canadian law enforcement and health agencies to improve safety measures.