Italian court annuls €15M OpenAI GDPR fine on jurisdictional grounds under EU one-stop-shop rule
By
Luis Rijo
Fresh out the oven, still warm. Top of the tray.
Summary
A Rome tribunal annulled Italy's €15 million GDPR fine against OpenAI, ruling that the Italian data protection authority (Garante) lacked jurisdiction once OpenAI established an Irish subsidiary in 2024. The decision turns on a procedural point under EU data protection law's "one-stop-shop" mechanism, which designates the lead supervisory authority based on the company's main establishment in the EU. This ruling carries significant implications for how regulators across the European Economic Area handle cross-border AI enforcement, potentially limiting the ability of individual national authorities to act against tech companies that have established their EU headquarters elsewhere.
Key quotes
· 3 pulledA Rome tribunal this month published its full reasoning in a ruling that annuls Italy's €15 million GDPR fine against OpenAI - a decision that turns almost entirely on a single procedural point under EU data protection law
Judge Damiana Colla ruled in favour of OpenAI OpCo, LLC, annulling the fine
the ruling carries significant implications for how regulators across the European Economic Area handle cross-border AI enforcement
You might also wanna read

EU's top court rules Italy can require Meta to negotiate and pay news publishers for content use
The European Court of Justice (CJEU) ruled that EU copyright law does not prevent individual member states like Italy from requiring tech co
Italy's privacy watchdog, scourge of US big tech, hit by corruption probe
EU Draft Proposals Seek to Weaken GDPR Privacy Rules for AI Industry Development
The article reveals that EU officials are drafting proposals to weaken GDPR privacy protections to accommodate the AI industry's data needs.
AI Copyright Cases: Courts Rule on LLM Training Data Memorization and Infringement
The article discusses legal cases involving AI companies and copyright infringement related to training data memorization. It covers a US co
arstechnica.com·3mo ago
Court Dismisses xAI's Trade Secrets Lawsuit Against OpenAI
A U.S. District Court judge granted OpenAI's motion to dismiss xAI's trade secrets lawsuit, ruling that xAI failed to demonstrate any miscon
German Court Orders Meta to Pay Fine for Violating Privacy Laws
A German court ruled that Meta must pay a fine for violating European privacy laws by embedding tracking technology in third-party websites
