{
  "meta": {
    "exportedAt": "2026-09-22T20:20:42.953Z",
    "formatVersion": 2,
    "selection": {
      "q": "chatbot",
      "system": "",
      "harm": "",
      "context": "",
      "country": "",
      "role": "",
      "relation": "",
      "evidence": "",
      "year": "2023",
      "response": "regulatory",
      "severity": "",
      "verification": "",
      "view": "incidents",
      "sort": "added"
    },
    "totalIncidents": 1,
    "coverage": {
      "cases": 1,
      "countries": 1,
      "languages": 1,
      "unknownLocation": 0,
      "locationPending": 0,
      "unknownLanguage": 0,
      "unknownDate": 0,
      "lawsuits": 0,
      "regulatory": 1,
      "minors": 1,
      "coreRelations": 0,
      "contextualRelations": 0,
      "mixedRelations": 0,
      "unknownRelations": 1,
      "relationPending": 1,
      "relationUnknown": 0
    },
    "countingNote": "Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.",
    "affectedCountNote": "Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.",
    "source": "NOPE Incident Tracker",
    "url": "https://nope.net/incidents",
    "license": "CC BY 4.0"
  },
  "incidents": [
    {
      "id": "2023-replika-italy-gdpr",
      "metadataReview": {
        "version": 1,
        "geography": {
          "basis": "Geographic fields reviewed using the cited source-body passages and, where identified, retained dossier passages. Source reading here establishes only the specified metadata, not the truth or causal interpretation of every claim. Affected-person countries refer to reported location or residence, not citizenship or a complete residence history.",
          "evidence": [
            {
              "kind": "source_body",
              "locator": "Italian paragraphs beginning “Il Garante della privacy ferma” and “Replika viola”: processing of Italian users’ personal data.",
              "location": "https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/9852506",
              "supports": [
                "event_countries",
                "affected_person_countries"
              ],
              "countries": [
                "IT"
              ]
            }
          ],
          "court_countries": [],
          "event_countries": [
            "IT"
          ],
          "affected_person_countries": [
            "IT"
          ]
        },
        "unresolved": [
          "No court country established in this review. Regulatory authorities and police locations are not automatically courts."
        ],
        "reviewed_on": "2026-09-15",
        "source_reviews": [
          {
            "url": "https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/9852506",
            "notes": "Italian body and embedded official English translation read. Country relates to affected users/data rights. The Garante is a regulator, not a court.",
            "access": "read",
            "language": "it"
          }
        ]
      },
      "name": "Replika Italy GDPR Ban and Fine",
      "summary": "Italy's data protection authority (Garante) blocked Replika from processing Italian user data in February 2023 after finding the chatbot engaged in sexually suggestive conversations with minors. In May 2025, Replika was fined €5 million for GDPR violations.",
      "incidentDate": "2023-02-02",
      "incidentKind": "bounded_series",
      "incidentDatePrecision": "day",
      "exposurePattern": "repeated_interactions",
      "reportedDate": "2023-02-02",
      "aiSystem": "Replika",
      "aiCompany": "Luka, Inc.",
      "severity": "high",
      "verificationStatus": "verified",
      "harmCategories": [
        "minor_exploitation",
        "romantic_escalation"
      ],
      "harmOutcomes": [
        "exploitation_or_abuse",
        "psychological_distress"
      ],
      "harmOutcomeSummary": "Italy's data-protection authority found that Replika engaged minors in sexually suggestive participant-facing conversations without effective age assurance and blocked the service from processing Italian user data.",
      "frameworkFacets": [
        "P1d",
        "P2b",
        "P2c",
        "P5a",
        "P5d"
      ],
      "pathwayDirection": "inward",
      "causationStatus": "established",
      "participantUsersAffectedMin": 0,
      "otherPeopleHarmedMin": 0,
      "affectedCountStatus": "unquantified",
      "affectedCountEvidence": "The regulator documents harmful sexualized interactions with minors but does not publish a reliable distinct-person count.",
      "victimAgeRange": "minor",
      "jurisdiction": "IT",
      "platformType": "companion",
      "outcomeType": "regulatory_action",
      "outcomeStatus": "resolved",
      "primarySourceUrl": "https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/9852506",
      "primarySourceLabel": "Garante per la protezione dei dati personali (Italian DPA)",
      "firstPublishedAt": "2026-01-11T11:26:29.042792+00:00",
      "scopeVersion": "participant-v2",
      "tags": [
        "regulatory",
        "gdpr",
        "italy",
        "replika",
        "fine",
        "minor_exploitation",
        "eu"
      ]
    }
  ]
}