Skip to content
Submit incident
AII-1001-87189
AllegedThe record is a lawsuit, complaint or accusation that has not been decided.Supporting sources are pending verification.

Privacy experts warn of data risks in ChatGPT's Studio Ghibli image trend

Privacy advocates have warned that ChatGPT's Studio Ghibli art generator, launched on March 26, 2025, may pose risks to users who upload personal photos. Experts allege OpenAI could be using the viral trend to collect facial data and personal images for AI training, potentially circumventing data protection regulations.

26 March 2025 Β· OpenAI Β· Privacy and surveillance
26 March 2025
AII-1001-87189
Quick facts
Organization
OpenAI (subject)
Category
Privacy and surveillance
Country
United States
Date
26 March 2025
Drafted by
Raidu Incident Detection

What happened

ChatGPT launched a Studio Ghibli image generation feature on March 26, 2025, allowing users to upload personal photos and receive animated versions in the style of Japanese animator Hayao Miyazaki.

The feature went viral on social media, with millions of users uploading personal images. On March 30 at around 4 PM, the surge in usage caused ChatGPT's servers to crash.

Reported impact

Privacy experts and cybersecurity advocates warned that users uploading personal photos unknowingly shared facial data and private images with OpenAI. Critics alleged the trend could enable identity theft, creation of fake profiles, data security breaches, and legal complications if photos are misused.

Index analysis

According to privacy advocates including Luiza Jarovsky, co-founder of the AI, Tech & Privacy Academy, voluntarily uploaded images give OpenAI legal consent to process them under different terms than web-scraped data, allowing the company to use submitted photographs without facing legal limitations.

Experts alleged OpenAI's privacy policy explicitly states the company collects personal data input by users to train its AI models when users have not opted out, and that the company gains access to original personal images while only processed versions are visible to other platforms.

Governance controls

Critics alleged that OpenAI's data collection methods through the Ghibli feature could circumvent GDPR regulations by obtaining user consent through voluntary submission rather than scraping, providing the company leeway to utilize users' facial data.

Classification

Organization
OpenAI (subject)
Category
Privacy and surveillance
Industry
Media, social platforms and marketing
Country
United States
Harm status
Potential harm
Intent
Unknown
Timing
Post-deployment
Harmed
Consumers
Failure modes
Training data misuse
AI systems
Studio Ghibli image generator
Regulations
GDPR (cited)

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident