{"meta":{"exportedAt":"2026-10-28T07:15:22.885Z","formatVersion":2,"selection":{"q":"exam","system":"","harm":"","context":"","country":"","role":"","relation":"contextual","evidence":"","year":"2025","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":3,"coverage":{"cases":3,"countries":3,"languages":3,"unknownLocation":0,"locationPending":0,"unknownLanguage":0,"unknownDate":0,"lawsuits":1,"regulatory":1,"minors":0,"coreRelations":1,"contextualRelations":3,"mixedRelations":1,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2025-czech-constitutional-court-fines-lawyer-for-complaint-citing-non-existent-rulings-drafted-with-ai-tool","caseFacts":{"claims":[{"id":"c1","status":"documented","evidence":[{"locator":"I.ÚS 3004/25 ze dne 1. 12. 2025; jako povinnému se ukládá pořádková pokuta ve výši 25 000 Kč; Pokutu uložil pouze ve čtvrtině zákonného rozpětí, neboť se povinný hrubého ztížení postupu řízení před Ústavním soudem dopustil poprvé a vadu podání lze ještě odstranit.","relation":"supports","source_id":"s1"}],"assertion":"On 1 December 2025 the presiding judge of a Constitutional Court chamber fined the lawyer 25,000 crowns for grossly obstructing proceedings, at a quarter of the statutory range because it was a first failing and the defect could still be remedied.","causal_attribution":"The fine responded to the filing; the order attributes the defects to the lawyer's failure to verify presumed AI output."},{"id":"c2","status":"documented","evidence":[{"locator":"V ústavní stížnosti argumentoval celkem 12 rozhodnutími Ústavního soudu a Evropského soudu pro lidská práva. Po pečlivém prostudování ústavní stížnosti Ústavní soud zjistil, že podstatná část z těchto rozhodnutí vůbec neexistuje a část je povinným hrubě dezinterpretována.","relation":"supports","source_id":"s1"}],"assertion":"The complaint argued from 12 decisions of the Constitutional Court and the European Court of Human Rights, a substantial part of which did not exist and part of which were grossly misinterpreted.","causal_attribution":"Established by the court's own verification."},{"id":"c3","status":"documented","evidence":[{"locator":"To vede Ústavní soud k domněnce, že povinný generoval podání pomocí některého z modelů umělé inteligence, poté však neověřil existenci citovaných rozhodnutí a správnost argumentace, resp. citace.","relation":"supports","source_id":"s1"}],"assertion":"The court found signs of AI use in the complaint and presumed that the lawyer had generated it with an AI model and then failed to verify the citations and argument.","causal_attribution":"The order records the court's presumption of AI generation; the lawyer's confirmation is a separate claim (c4)."},{"id":"c4","status":"reported","evidence":[{"locator":"Že opravdu použil při sepisování stížnosti umělou inteligenci, potvrdil INFO.CZ samotný advokát, který nad celou situací vyjádřil lítost.; Přiznává, že jeho chybou bylo, že výstup nedostatečně kontroloval a spolehl se na to, že uvedená judikatura odpovídá.; placený profesionální model AI, který nabízí některá z velkých společností provozujících komplexní právní informační systémy","relation":"supports","source_id":"s3"}],"assertion":"The lawyer confirmed to INFO.CZ that AI was used to write the complaint, said the output was not checked enough, and described the tool as a paid professional AI model from a large legal information system provider.","causal_attribution":"The lawyer attributes the false citations to the AI tool's output that was not checked."},{"id":"c5","status":"documented","evidence":[{"locator":"Stěžovateli, prostřednictvím jeho právního zástupce, souběžně Ústavní soud zasílá výzvu k odstranění vad ústavní stížnosti, aby stěžovatel v důsledku postupu svého právního zástupce neutrpěl procesní újmu.","relation":"supports","source_id":"s1"},{"locator":"I.ÚS 3004/25 ze dne 30. 1. 2026; Ústavní stížnost se odmítá.","relation":"supports","source_id":"s2"}],"assertion":"The court invited the client to remedy the complaint so that the client would suffer no procedural harm, and later rejected the complaint as manifestly unfounded on 30 January 2026.","causal_attribution":"No source connects the rejection to the AI-generated citations."},{"id":"c6","status":"reported","evidence":[{"locator":"Podle zdrojů INFO.CZ se kontrolní rada ČAK tímto konkrétním případem již zabývá. A to přestože se advokát soudu omluvil, pokutu zaplatil a klienta se jeho selhání nedotkne, neboť od ÚS dostal prostor na nápravu.","relation":"supports","source_id":"s4"},{"locator":"Ústavní soud ocenil následný přístup advokáta, který pokutu obratem uhradil a zaslal omluvu.","relation":"supports","source_id":"s5"}],"assertion":"The lawyer apologised and paid the fine, and the Czech Bar Association's supervisory board was reported to be examining the case.","causal_attribution":"Consequence of the fine; the bar examination rests on INFO.CZ's unnamed sources."},{"id":"c7","status":"reported","evidence":[{"locator":"Pokud jde o využití AI pro přípravu podání bez kontroly zdrojů, může se skutečně jednat o kárné provinění advokáta; Ve svých důsledcích by to mohlo vést k postihování advokáta obecně za podání, které soud vyhodnotí jako nekvalitní nebo s nesprávně aplikovanou judikaturou","relation":"supports","source_id":"s4"}],"assertion":"The Czech Bar Association's president said using AI for a filing without checking sources may be a disciplinary offence, while the bar expressed reservations about courts fining lawyers for filings they judge to be of poor quality.","causal_attribution":"Context and a qualification of the sanction, not a causal claim."}],"effects":[{"label":"fined 25,000 crowns by the Constitutional Court over non-existent and misinterpreted rulings in an AI-drafted complaint","claim_id":"c1","direction":"negative"},{"label":"case reported to be under examination by the bar association's supervisory board","claim_id":"c6","direction":"negative"}],"sources":[{"id":"s1","url":"https://nalus.usoud.cz/Search/GetText.aspx?sz=1-3004-25_1","kind":"court_decision","access":"read","language":"cs","translation_note":"Read in Czech on 2026-10-26 (HTTP 200); quoted passages were translated by the research agent (an AI). Order dated 1 December 2025 in the NALUS database; the client and lawyer are named in the order and are not reproduced here.","independence_group":"czech-constitutional-court-order-i-us-3004-25-dec-2025"},{"id":"s2","url":"https://nalus.usoud.cz/Search/GetText.aspx?sz=1-3004-25_2","kind":"court_decision","access":"read","language":"cs","translation_note":"Read in Czech on 2026-10-26 (HTTP 200); quoted passages were translated by the research agent (an AI). Resolution dated 30 January 2026 in the NALUS database.","independence_group":"czech-constitutional-court-resolution-i-us-3004-25-jan-2026"},{"id":"s3","url":"https://www.info.cz/zpravodajstvi-a-komentare/ustavni-soud-pokuta-advokat-umela-inteligence-ai","kind":"news_report","access":"read","language":"cs","translation_note":"Read in Czech on 2026-10-26 (HTTP 200); quoted passages were translated by the research agent (an AI). INFO.CZ broke the story and interviewed the fined lawyer; later reports relay its interview.","independence_group":"info-cz-lawyer-interview-dec-2025"},{"id":"s4","url":"https://www.info.cz/zpravodajstvi-a-komentare/pokuta-advokat-ai-justice-cak-vyhrady","kind":"news_report","access":"read","language":"cs","translation_note":"Read in Czech on 2026-10-26 (HTTP 200); quoted passages were translated by the research agent (an AI). Follow-up article with statements of the Czech Bar Association president and the presidents of the two top courts.","independence_group":"info-cz-bar-reaction-dec-2025"},{"id":"s5","url":"https://advokatnidenik.cz/2025/12/12/generativni-ai-prinesla-k-soudum-take-halucinace-ai-v-pravnich-podanich/","kind":"news_report","access":"read","language":"cs","translation_note":"Read in Czech on 2026-10-26 (HTTP 200); quoted passages were translated by the research agent (an AI). Bar Association journal article credited to the ČTK news agency.","independence_group":"ctk-advokatni-denik-dec-2025"}],"version":1,"ai_roles":["own_use"],"contexts":["justice","work"],"unknowns":["The name of the AI tool and its provider; the lawyer declined to name it.","The date the complaint was filed (INFO.CZ says it reached the court in October 2025).","The outcome of the Czech Bar Association supervisory board's examination, if any."],"geography":{"basis":"The complaint was filed with, and the fine imposed by, the Czech Constitutional Court; the reports describe the lawyer as practising in Prague. Residence is not recorded as a country of the affected person.","court_countries":["CZ"],"event_countries":["CZ"],"affected_person_countries":[]},"publication":{"basis":"Published as a concrete adverse consequence of AI use: the Constitutional Court's order fines a lawyer for a complaint whose non-existent citations it presumes were generated with an AI model, and the lawyer confirmed using a paid legal AI tool without checking its output.","reviewed_on":"2026-10-26"},"ai_involvement":{"basis":"The Constitutional Court's order finds that a substantial part of the 12 decisions cited in the complaint did not exist, identifies signs of AI-generated text, and presumes the lawyer generated the filing with an AI model without verifying it; the lawyer confirmed to INFO.CZ that an AI tool, a paid professional model from a legal information system provider, was used and that its output was not checked enough. The tool's output reached the lawyer and went into the complaint (communicated_with), and the court read those invented authorities and fined the lawyer for them (informed_decision_about). The provider is not named.","status":"supported"},"person_relations":["communicated_with","informed_decision_about"]},"name":"Czech Constitutional Court fines a lawyer 25,000 crowns over a complaint citing non-existent rulings; the lawyer says a paid legal AI tool drafted it","summary":"On 1 December 2025 the presiding judge of a chamber of the Czech Constitutional Court fined a Prague lawyer 25,000 crowns (a quarter of the statutory maximum) for grossly obstructing proceedings. The lawyer had filed a constitutional complaint, for a client refused a temporary residence permit, that argued from 12 decisions of the Constitutional Court and the European Court of Human Rights; the court found that a substantial part of them did not exist and part were grossly misinterpreted. The order says the complaint showed signs of generative AI and that the court presumed the lawyer had generated it with an AI model and then failed to verify the citations. The lawyer confirmed to INFO.CZ that an AI tool was used, described it as a paid professional model from a legal information system provider, said the output was not checked enough, and expressed regret. The court invited the client to correct the complaint so that the client would suffer no procedural harm; the complaint was later rejected as manifestly unfounded on 30 January 2026. INFO.CZ reported on 10 December 2025 that the lawyer had apologised and paid the fine and that the Czech Bar Association's supervisory board was examining the case.","incidentDate":"2025-12-01","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"single_interaction","reportedDate":"2025-12-03","aiSystem":"A paid professional AI model offered by a legal information system provider, used to draft a constitutional complaint (provider not named; the court inferred generative AI from the text and the lawyer confirmed its use)","aiProduct":"Unidentified legal research tool","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["financial_loss","legal_harm"],"harmOutcomeSummary":"According to the Constitutional Court's order, a lawyer whose complaint cited non-existent and misinterpreted rulings, which the court presumed were AI-generated and the lawyer says came from a paid legal AI tool, was fined 25,000 crowns; INFO.CZ reported that the bar association's supervisory board was examining the case.","frameworkFacets":[],"causationStatus":"established","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person: the lawyer fined by the Constitutional Court. The court invited the client to remedy the complaint so that the client would suffer no procedural harm, and INFO.CZ reports that the client was not affected, so the client is not counted.","victimAgeRange":"adult","jurisdiction":"CZ","platformType":"other","outcomeType":"regulatory_action","outcomeStatus":"resolved","primarySourceUrl":"https://nalus.usoud.cz/Search/GetText.aspx?sz=1-3004-25_1","primarySourceLabel":"Czech Constitutional Court, order I. US 3004/25 imposing a disciplinary fine (1 December 2025)","firstPublishedAt":"2026-10-26T03:09:43.763021+00:00","updatedAt":"2026-10-26T03:09:43.763021+00:00","scopeVersion":"facts-v3","tags":["czechia","legal-profession","hallucinated-citations","court-fine","constitutional-court"]},{"id":"2025-san-diego-health-system-patient-alleges-ai-scribe-recorded-exam-room-visit-without-consent","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'A proposed class-action lawsuit filed in San Diego Superior Court claims Sharp HealthCare secretly recorded doctor-patient conversations using an artificial intelligence tool'; 'The tool records conversations between patients and clinicians and then generates draft medical notes.'","relation":"supports","source_id":"s1"},{"locator":"'A recent lawsuit filed in San Diego Superior Court alleges that Sharp HealthCare recorded conversations between doctors and their patients without written consent, using the information to document visits with an artificial intelligence program developed by a private company in Pittsburgh.'","relation":"supports","source_id":"s2"},{"locator":"'A lawsuit in San Diego claims Sharp Healthcare recorded doctor visits without written consent, while using an A.I. tool called Abridge to take notes.'","relation":"supports","source_id":"s3"}],"assertion":"A proposed class action filed in San Diego Superior Court alleges that Sharp HealthCare used the AI app Abridge, which records patient-clinician conversations and generates draft medical notes, and recorded doctor-patient conversations without patients' consent.","causal_attribution":"The complaint's allegations, relayed by three outlets (one underlying origin: the complaint); not tested in court in the sources read."},{"id":"c2","status":"reported","evidence":[{"locator":"'Sharp began using an AI app called Abridge in April of this year, according to the complaint.'; 'sent the audio to the company’s servers, where employees could review it.'; 'Patients were never informed that their appointments were being recorded or given an opportunity to consent or opt-out, the lawsuit alleges.'","relation":"supports","source_id":"s1"},{"locator":"'Recordings, the lawsuit states, were transmitted to Abridge'","relation":"supports","source_id":"s2"}],"assertion":"According to the complaint, Sharp began using Abridge in April 2025, and the app captured everything said in the exam room and sent the audio to the company's servers, where employees could review it; patients were never informed or given a chance to consent or opt out.","causal_attribution":"Complaint allegations; the start date and server review detail are in the KPBS relay only, the transmission to Abridge in both."},{"id":"c3","status":"reported","evidence":[{"locator":"'said he discovered the recording only after reading his medical notes from a July appointment at a Sharp Rees-Stealy clinic. When he contacted Sharp, the lawsuit said the clinic apologized, acknowledged the recording occurred and told him the file could remain on the vendor’s servers for about a month before being deleted.'","relation":"supports","source_id":"s1"}],"assertion":"The plaintiff says he discovered that a July appointment at a Sharp clinic had been recorded only after reading his medical notes; according to the lawsuit the clinic apologised, acknowledged the recording and said the file could remain on the vendor's servers for about a month.","causal_attribution":"The plaintiff's account in the complaint as reported by KPBS; Sharp's acknowledgement is as described in the lawsuit, not a Sharp statement read directly."},{"id":"c4","status":"reported","evidence":[{"locator":"'It also claims that Abridge automatically inserted incorrect statements into medical charts, documenting that patients “were advised” the visit was being recorded and that they “consented,” even when the patient said it never happened.'","relation":"supports","source_id":"s1"}],"assertion":"The complaint alleges that Abridge automatically inserted incorrect statements into medical charts documenting that patients were advised the visit was being recorded and consented, even when the patient said it never happened.","causal_attribution":"Complaint allegation relayed by KPBS only; whether the tool or a clinician produced the entries is not established in the sources."},{"id":"c5","status":"reported","evidence":[{"locator":"'The lawsuit seeks damages, corrections to medical records, and a court order blocking the use of the AI tool without proper consent. It estimates that more than 100,000 Sharp patients may have been recorded during the rollout.'","relation":"supports","source_id":"s1"},{"locator":"'seeks class action status and damages that could reach five thousand dollars per violation.'","relation":"supports","source_id":"s3"}],"assertion":"The lawsuit seeks class status, damages, corrections to medical records and an order blocking use of the tool without consent, and estimates that more than 100,000 Sharp patients may have been recorded.","causal_attribution":"The relief sought and the estimate are the complaint's; the estimate is of people possibly recorded."},{"id":"c6","status":"reported","evidence":[{"locator":"'Both Sharp and Counterpoint Legal said they cannot comment on pending litigation.'","relation":"supports","source_id":"s1"},{"locator":"'Sharp said that while \"patient safety and privacy are our top priorities at all times,\" it is \"unable to comment on pending litigation.\"'","relation":"supports","source_id":"s2"}],"assertion":"Sharp said patient safety and privacy are its top priorities and that it could not comment on pending litigation.","causal_attribution":"Sharp's statements to two outlets (one party); no response to the substance of the allegations is reported."},{"id":"c7","status":"reported","evidence":[{"locator":"'Abridge suggests that doctors could say, \"I will be using a tool that records our conversation to help me write my clinical note, so I can pay more attention to our conversation and less time on the computer. Is that okay with you?\"'","relation":"supports","source_id":"s2"},{"locator":"'Other local hospitals say they use similar tech, but with patient permission.'","relation":"supports","source_id":"s3"}],"assertion":"Abridge's support material suggests consent language clinicians could use with patients, and other San Diego providers using similar tools say they require patient consent.","causal_attribution":"Context from the Union-Tribune's review of Abridge's support pages and both outlets' comments from other providers; not a statement about this visit."}],"effects":[{"label":"confidential clinic visit recorded and sent to an AI vendor without the patient’s knowledge (alleged)","claim_id":"c3","direction":"negative"},{"label":"chart entry stating consent the patient says he never gave (alleged)","claim_id":"c4","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.kpbs.org/news/health/2025/12/11/lawsuit-claims-sharp-healthcare-secretly-recorded-exam-room-conversations-without-patient-consent","kind":"news_report","access":"read","language":"en","translation_note":"English original; no translation.","independence_group":"kpbs-11-dec-2025"},{"id":"s2","url":"https://medicalxpress.com/news/2026-01-ai-exam-room-lawsuit-alleges.html","kind":"news_report","access":"read","language":"en","translation_note":"English original; no translation.","independence_group":"san-diego-union-tribune-6-jan-2026"},{"id":"s3","url":"https://www.msn.com/en-us/news/crime/ai-in-the-exam-room-lawsuit-says-not-so-fast/ar-AA1TG8JK","kind":"news_report","access":"read","language":"en","translation_note":"English original; no translation.","independence_group":"san-diego-union-tribune-6-jan-2026"}],"version":1,"ai_roles":["institutional_use"],"contexts":["health","privacy"],"unknowns":["Whether a court has ruled on the complaint or certified a class.","Sharp's and Abridge's response to the substance of the allegations.","How many patients were recorded without consent; the 100,000 figure is the complaint's estimate of patients who may have been recorded.","Whether the consent statements in charts were produced by the tool or entered by clinicians, beyond the complaint's allegation.","Whether recordings were used for anything beyond note generation."],"geography":{"basis":"The recorded visit was at a Sharp clinic and the suit was filed in San Diego Superior Court (KPBS; Union-Tribune). The plaintiff's country of residence is not stated.","court_countries":["US"],"event_countries":["US"],"affected_person_countries":[]},"publication":{"basis":"Published as a privacy-capture case (received_personal_information) under the 2026-10-06 boundary: a reported complaint describes a patient's confidential visit actually being recorded into an AI documentation service and sent to its vendor without his knowledge, with the AI-generated chart allegedly stating he consented (made_claim_about). All facts are attributed to the complaint.","reviewed_on":"2026-10-17"},"ai_involvement":{"basis":"According to the complaint as reported by KPBS and the San Diego Union-Tribune, Sharp's AI documentation app Abridge recorded the conversation at the plaintiff's July clinic visit and transmitted the audio to Abridge's servers to generate draft notes, without his knowledge or consent; the lawsuit says the clinic acknowledged the recording. The complaint also alleges that Abridge inserted chart statements that he had been advised and had consented. That capture and disclosure of his confidential visit, and the false consent entry, are the reported harm. These are allegations not yet tested in court.","status":"reported"},"person_relations":["received_personal_information","made_claim_about"]},"name":"Class action alleges San Diego health system Sharp's Abridge AI scribe recorded a patient's exam-room visit without consent and charted false consent","summary":"A proposed class action filed in San Diego Superior Court in late 2025 alleges that Sharp HealthCare, which began using the AI documentation app Abridge in April 2025, recorded doctor-patient conversations without telling patients, sent the audio to the vendor's servers and used it to generate draft medical notes. According to the lawsuit as reported by KPBS, the named plaintiff discovered that a July appointment at a Sharp clinic had been recorded only when he read his medical notes; the clinic apologised, acknowledged the recording and told him the file could stay on the vendor's servers for about a month. The complaint also alleges that Abridge inserted statements into charts that patients had been advised of the recording and had consented, when the plaintiff says that never happened. It seeks damages, corrected medical records and an order against using the tool without consent, and estimates that more than 100,000 patients may have been recorded. Sharp told reporters it could not comment on pending litigation. The allegations have not been tested in court in the sources read.","incidentDate":"2025-07-01","incidentKind":"single_event","incidentDatePrecision":"month","exposurePattern":"single_interaction","reportedDate":"2025-12-11","aiSystem":"Abridge, an AI clinical documentation app that, according to the complaint as reported, records patient-clinician conversations and generates draft medical notes; deployed by Sharp HealthCare from April 2025","aiProduct":"Abridge (reported)","aiCompany":"Abridge","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["loss_of_autonomy","other_material_harm"],"harmOutcomeSummary":"According to a proposed class action, a patient's confidential clinic visit was recorded by an AI documentation tool and sent to its vendor without his knowledge or consent, and his chart falsely recorded that he had consented.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"partial","affectedCountEvidence":"One person counted: the named plaintiff whose July visit, the lawsuit says, was recorded (KPBS). The complaint alleges other patients were recorded without consent but gives only an estimate that more than 100,000 'may have been recorded', which is not counted.","victimAgeRange":"adult","jurisdiction":"US-CA","platformType":"other","outcomeType":"lawsuit_filed","outcomeStatus":"pending","primarySourceUrl":"https://www.kpbs.org/news/health/2025/12/11/lawsuit-claims-sharp-healthcare-secretly-recorded-exam-room-conversations-without-patient-consent","primarySourceLabel":"KPBS, 11 December 2025: lawsuit claims Sharp HealthCare secretly recorded exam room conversations without patient consent","firstPublishedAt":"2026-10-17T03:04:33.888418+00:00","updatedAt":"2026-10-17T03:04:33.888418+00:00","scopeVersion":"facts-v3","tags":["ai_scribe","ambient_documentation","recording_without_consent","medical_privacy","class_action"]},{"id":"2025-eindhoven-municipal-staff-uploaded-residents-youth-care-and-social-support-files-to-public-ai-websites","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'Uit die steekproef is aan het licht gekomen dat er bestanden met persoonlijke gegevens naar openbare AI-websites zoals ChatGPT zijn gestuurd.'; 'Denk aan Jeugdwetdocumenten, interne verslagen en cv'; 'De steekproef ging over de periode van 23 september tot 23 oktober'","relation":"supports","source_id":"s1"},{"locator":"'In een steekproef over de periode van 23 september tot 23 oktober 2025 constateerde de gemeente dat verschillende soorten bestanden met persoonsgegevens waren geüpload naar openbare AI-websites.'","relation":"supports","source_id":"s3"}],"assertion":"According to the council letter as reported, a sample of staff data traffic from 23 September to 23 October 2025 found that files containing personal data of residents and employees had been uploaded to public AI websites such as ChatGPT, including youth-care documents, internal reports and CVs, mostly from care and support departments.","causal_attribution":"The municipality's own account in its council letter, relayed by two outlets that share that origin."},{"id":"c2","status":"reported","evidence":[{"locator":"'documenten uit de Jeugdwet met daarin informatie over de mentale en fysieke gezondheid van minderjarige kinderen'; 'Maar ook documenten van de Wet Maatschappelijke Ondersteuning (WMO) zijn ingevoerd.'; 'van sollicitanten en reflectieverslagen van medewerkers met daarin informatie over werkprestaties zijn in de Ai-tool terechtgekomen.'","relation":"supports","source_id":"s2"}],"assertion":"According to Omroep Brabant's account of the advisory firm's findings, the youth-care documents contained information about the mental and physical health of minor children, and social-support (WMO) documents, applicants' CVs and employees' reflection reports were also entered into the AI tool.","causal_attribution":"The advisory firm's findings as reported by one outlet; the report itself was not read."},{"id":"c3","status":"reported","evidence":[{"locator":"'Het datalek is op 23 oktober gemeld bij de Autoriteit Persoonsgegevens.'; 'De gemeente heeft OpenAI (het bedrijf achter ChatGPT) verzocht om de bestanden die vanuit Eindhoven zijn geüpload te verwijderen.'","relation":"supports","source_id":"s1"},{"locator":"'Sinds 23 oktober kunnen medewerkers alleen nog gebruikmaken van Copilot binnen de beveiligde gemeente-omgeving.'","relation":"supports","source_id":"s3"}],"assertion":"The municipality reported the breach to the Dutch Data Protection Authority on 23 October, stopped staff using public AI websites (allowing only Copilot in its secured environment), and asked OpenAI to delete the uploaded files.","causal_attribution":"The municipality's statements of its response, relayed by two outlets sharing the council-letter origin."},{"id":"c4","status":"reported","evidence":[{"locator":"'Daarom is het volgens het college ook niet mogelijk om mensen van wie gegevens gelekt zijn te informeren.'; 'Individuele gegevens die zijn geüpload in een AI-tool kunnen niet eenvoudig door derden uit de tool worden gehaald en worden misbruikt.'","relation":"supports","source_id":"s1"},{"locator":"'De gemeente Eindhoven heeft van OpenAi nog geen reactie gehad op hun verzoek, zo liet een woordvoerder vrijdag weten.'","relation":"supports","source_id":"s2"},{"locator":"'De totale omvang van de gedeelde gegevens is niet vast te stellen, omdat deze gegevens maximaal 30 dagen beschikbaar zijn.'","relation":"supports","source_id":"s3"}],"assertion":"The council says the scale of the uploads cannot be established because the data was kept for only 30 days, that it therefore cannot inform those affected, and that individual uploaded data cannot easily be extracted by third parties though the risk cannot be fully excluded; a spokesperson said OpenAI had not yet replied.","causal_attribution":"The council's and a spokesperson's statements about scope and risk."}],"effects":[{"label":"residents' youth-care and social-support files and job applicants' CVs uploaded to public AI websites without their knowledge (council letter, as reported)","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.omroepbrabant.nl/nieuws/6001041/datalek-gemeente-eindhoven-deelt-persoonsgegevens-met-openbare-ai-websites","kind":"news_report","access":"read","language":"nl","translation_note":"Read in Dutch on 2026-10-12; quoted passages were translated into English by the research agent (an AI), not by a human translator. Omroep Brabant's report of the council information letter.","independence_group":"eindhoven-council-letter"},{"id":"s2","url":"https://www.omroepbrabant.nl/nieuws/6001062/datalek-eindhoven-met-kwetsbare-burgers-verwijderverzoek-is-kansloos","kind":"news_report","access":"read","language":"nl","translation_note":"Read in Dutch on 2026-10-12; quoted passages were translated into English by the research agent (an AI), not by a human translator. Omroep Brabant's follow-up citing the advisory firm's findings and a municipal spokesperson; the firm's report itself was not read.","independence_group":"omroep-brabant-hooghiemstra-findings"},{"id":"s3","url":"https://www.binnenlandsbestuur.nl/digitaal/gemeente-eindhoven-blokkeert-chatgpt-na-datalek","kind":"news_report","access":"read","language":"nl","translation_note":"Read in Dutch on 2026-10-12; quoted passages were translated into English by the research agent (an AI), not by a human translator. Binnenlands Bestuur's report of the same council letter, so it shares the first source's group.","independence_group":"eindhoven-council-letter"}],"version":1,"ai_roles":["others_use"],"contexts":["public_services","health","work","privacy"],"unknowns":["How many residents, children, applicants and employees had data uploaded.","Whether uploads happened before or after the 23 September to 23 October 2025 sample window.","Which AI websites other than ChatGPT received files, and which account types staff used.","Whether OpenAI deleted the files, and whether any data was retained or used for training.","Whether the Dutch Data Protection Authority has taken a decision on the notification."],"geography":{"basis":"The uploads were found in the data traffic of the municipality of Eindhoven's staff, and the files concern residents and employees of that Dutch municipality. No court is involved.","court_countries":[],"event_countries":["NL"],"affected_person_countries":["NL"]},"publication":{"basis":"Published under the 2026-10-06 private-information ruling: the municipality's council letter, as reported by two outlets, describes staff actually uploading files with residents' youth-care and social-support data and applicants' CVs to public AI websites such as ChatGPT, without the knowledge of the people concerned. The scale is unknown and is recorded as such; the council's view that misuse risk is limited is recorded with it.","reviewed_on":"2026-10-12"},"ai_involvement":{"basis":"The municipality's council letter, as reported by two outlets, states that a sample of staff data traffic found files with residents' and employees' personal data, including youth-care documents, had been sent to public AI websites such as ChatGPT, and the municipality asked OpenAI to delete the uploaded files. The privacy harm is that transfer of residents' and employees' records into AI services without their knowledge. The sources report the uploads; they report no output about the people concerned, and whether the data was retained or used for training is not established (an expert's view on training is opinion).","status":"reported"},"person_relations":["received_personal_information"]},"name":"Eindhoven municipality says staff uploaded files with residents' youth-care and social-support data and applicants' CVs to public AI websites such as ChatGPT","summary":"The municipality of Eindhoven in the Netherlands told its council in an information letter shared on Thursday 18 December 2025 that a sample of staff data traffic from 23 September to 23 October 2025 showed files containing personal data of residents and employees had been sent to public AI websites such as ChatGPT, according to Omroep Brabant and Binnenlands Bestuur. The files included youth-care (Jeugdwet) documents, internal reports and CVs, mostly from departments that provide care and support to residents. According to Omroep Brabant's account of findings by the advisory firm Hooghiemstra & Partners, the youth-care documents held information about the mental and physical health of minor children, and social-support (WMO) documents and applicants' CVs were also entered. The municipality reported the breach to the Dutch Data Protection Authority on 23 October, blocked public AI websites and asked OpenAI to delete the files. The council says the scale cannot be determined because the data was kept for only 30 days, so it cannot inform those affected, and that the risk of misuse is limited but cannot be ruled out. A spokesperson said OpenAI had not yet replied.","incidentDate":"2025-09-23","incidentEndDate":"2025-10-23","incidentKind":"bounded_series","incidentDatePrecision":"day","exposurePattern":"repeated_interactions","reportedDate":"2025-12-18","aiSystem":"Public AI websites, which the municipality's council letter, as reported, names with ChatGPT as the example; the municipality asked OpenAI to delete the uploaded files","aiProduct":"ChatGPT (reported)","severity":"high","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"According to the municipality's council letter as reported, staff uploaded files containing personal data of residents and employees, including youth-care documents about children's mental and physical health and social-support files, to public AI websites such as ChatGPT; the council says it cannot determine the scale or inform those affected.","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":0,"otherPeopleHarmedMin":0,"affectedCountStatus":"unquantified","affectedCountEvidence":"The council says the scale cannot be established because the uploaded data was kept for only 30 days, and that it therefore cannot inform the people concerned. No count of residents, children, applicants or employees is given, so numeric zero placeholders are recorded. The staff who uploaded the files are not counted.","victimAgeRange":"unknown","jurisdiction":"NL","platformType":"other","outcomeStatus":"ongoing","primarySourceUrl":"https://www.omroepbrabant.nl/nieuws/6001041/datalek-gemeente-eindhoven-deelt-persoonsgegevens-met-openbare-ai-websites","primarySourceLabel":"Omroep Brabant, 19 December 2025: Eindhoven data breach, municipality shares personal data with public AI websites","firstPublishedAt":"2026-10-12T03:35:14.550754+00:00","updatedAt":"2026-10-12T03:35:14.550754+00:00","scopeVersion":"facts-v3","tags":["privacy","government","municipality","youth-care","health-data","chatgpt","unauthorised-ai-use","netherlands"]}]}