After more than a year of investigations, the Italian privacy regulator - il Garante per la protezione dei dati personali - issued a €15 million fine against OpenAI for violating privacy rules. Violations include lack of appropriate legal basis for collecting and processing the personal data used for training their generative AI (genAI) models, lack of adequate information provided to users about the collection and use of their personal data, and lack of measures for lawfully collecting children's data.