Skip to content
Submit incident
AII-1001-43937
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.Supporting sources are pending verification.

Basque Data Authority warns of privacy risks in ChatGPT erotic conversations

Spain's Basque Data Protection Authority warned on 27 October 2025 that ChatGPT's planned feature allowing erotic conversations poses significant privacy risks. The authority raised concerns about the collection of sensitive personal data through age verification and user tracking, and warned that intimate content breaches could cause particular harm.

27 October 2025 路 OpenAI 路 Privacy and surveillance
27 October 2025
AII-1001-43937
Quick facts
Category
Privacy and surveillance
Country
Spain
Date
27 October 2025
Drafted by
Raidu Incident Detection

What happened

The Basque Data Protection Authority (AVPD) issued a warning on 27 October 2025 about privacy risks posed by ChatGPT's new functionality allowing erotic conversations.

According to AVPD president Unai Aberasturi, users engaging in erotic conversations with ChatGPT reveal private personal data belonging to them, presenting a risk to citizens.

Reported impact

The AVPD warned that intimate conversations with the AI would require age verification potentially involving biometric data such as facial recognition.

The authority noted that digital footprints are not anonymous when using such tools, and that collected data including user identity, IP address, interaction history, metadata, conversational patterns, and conversation content can be used for profiling or to train technology. The AVPD emphasized that such personal data takes on a new dimension when it concerns intimate content, making erotic conversations through ChatGPT 'highly sensitive' content that poses significant danger in case of data breach or exposure.

Index analysis

The AVPD stated it would remain 'especially vigilant' regarding the conduct of technology platforms and called on developers to clearly inform users about what data is collected, for what purposes, and how user rights are protected.

Classification

Category
Privacy and surveillance
Industry
Consumer services
Country
Spain
Harm status
Potential harm
Intent
Unintentional
Timing
Pre-deployment
Harm types
Human or fundamental rights
Harmed
Consumers
Consequences
None recorded
AI systems
ChatGPT
Regulations
GDPR (cited)

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident