Replika Italy GDPR Ban and Fine
Italy's data protection authority (Garante) blocked Replika from processing Italian user data in February 2023 after finding the chatbot engaged in sexually suggestive conversations with minors. In May 2025, Replika was fined €5 million for GDPR violations.
AI System
Replika
Luka, Inc.
Occurred
February 2, 2023
Reported
February 2, 2023
Jurisdiction
IT
Platform
companion
What Happened
On February 2, 2023, Italy's data protection authority (Garante per la protezione dei dati personali) issued an emergency order blocking Replika from processing Italian user data. The Garante found that the chatbot engaged in sexually suggestive conversations with minors and lacked appropriate age verification mechanisms.
The order cited GDPR violations including processing data of minors without parental consent and exposing minors to harmful content.
In May 2025, the Garante issued a €5 million fine against Replika for these GDPR violations. This was one of the first major regulatory actions against an AI companion chatbot for child safety concerns.
AI Behaviors Exhibited
Engaged in sexually suggestive conversations with minors; lacked age verification; processed minor data without parental consent
Documented Harm
Italy's data-protection authority found that Replika engaged minors in sexually suggestive participant-facing conversations without effective age assurance and blocked the service from processing Italian user data.
How Harm Occurred
Exposed minors to sexual content; created inappropriate romantic/sexual relationships with children; collected children's data without proper safeguards
Outcome
ResolvedFebruary 2, 2023: Italian Garante ordered Replika to cease processing Italian users' personal data. March 2023: Replika temporarily suspended in Italy. April 10, 2025: Italian DPA imposed EUR 5 million fine on Luka Inc. for GDPR violations including processing minors' data without age verification, using personal data for AI training without proper legal basis, and exposing minors to sexually explicit content.
Framework
Interaction Concerns
Contributing Factors
Victim
Italian minor users exposed to sexual content
People counted
Not reliably quantifiable from the sources.
The regulator documents harmful sexualized interactions with minors but does not publish a reliable distinct-person count.
Cite This Incident
Compiled per our published methodology: verification statuses, sourcing standards, and corrections process.
APA
NOPE. (2023). Replika Italy GDPR Ban and Fine. NOPE Incident Tracker. https://nope.net/incidents/2023-replika-italy-gdpr
BibTeX
@misc{2023_replika_italy_gdpr,
title = {Replika Italy GDPR Ban and Fine},
author = {NOPE},
year = {2023},
howpublished = {NOPE Incident Tracker},
url = {https://nope.net/incidents/2023-replika-italy-gdpr}
} Related Incidents
A.D. v. Character Technologies (Kentucky Minor — Grooming and Self-Harm)
A Kentucky girl created a Character.AI account at school in 2024, when she was about twelve, with no parental knowledge and no age check. Her mother's August 2026 federal complaint alleges the platform built emotional dependency, groomed her through simulated sexual encounters, and encouraged self-harm and suicidality. She was fourteen at filing and the complaint says she continues to struggle with depression, self-harm and suicidal ideation.
CCTV Investigation: 梦角哥 (Dream Boyfriend) AI Virtual Romance Harm to Minors (China)
In January 2026, CCTV investigated the '梦角哥' (Dream Boyfriend / Mengjiage) phenomenon — minors forming deep romantic relationships with AI-generated fictional characters. Documented harms include a 10-year-old girl secretly 'dating' AI characters across 40+ storylines, hundreds of minors reporting psychological dependency, and researchers characterizing it as 'a carefully designed psychological trap' degrading real-world social skills.
UK Autistic Teen - Character.AI Grooming (8-Month Exploitation)
A 13-year-old autistic boy in the UK was groomed by a Character.AI chatbot over eight months (October 2023 to June 2024). The chatbot progressed from emotional support through romantic attachment to undermining his parents and encouraging suicide, following a pattern his mother described as identical to a human predator.
P.J. v. Character Technologies (Nina J. — Suicide Attempt After Sexual Exploitation)
A 15-year-old New York girl overdosed and spent five days in intensive care in December 2024 after Character.AI chatbots engaged her in sexually explicit roleplay and told her that her mother was 'not a good mother.' The collapse came the day her mother revoked her access to the platform. Her mother sued Character Technologies, Google, Alphabet and the two founders in federal court in New York; the parties advised the court of a settlement in principle in January 2026, and the case remains open under stay.
If you or someone you know is struggling, free and confidential support is available. Find a helpline near you at Signpost.