{"meta":{"exportedAt":"2026-11-07T02:57:38.858Z","formatVersion":2,"selection":{"q":"privacy","system":"","harm":"","context":"","country":"","role":"","relation":"","evidence":"","year":"2024","response":"regulatory","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":5,"coverage":{"cases":5,"countries":3,"languages":3,"unknownLocation":1,"locationPending":0,"unknownLanguage":0,"unknownDate":0,"lawsuits":0,"regulatory":5,"minors":1,"coreRelations":4,"contextualRelations":2,"mixedRelations":1,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2024-winnipeg-man-says-meta-ai-told-him-fake-facebook-support-number-was-legitimate-then-scammers-took-over-accounts","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'did a search in Facebook Messenger to find out whether it was legitimate.'; 'was \"indeed a legitimate Facebook support number.\"'; 'took this screen capture of his message from Meta AI, after he did a search to confirm the supposed tech support number.'","relation":"supports","source_id":"s1"}],"assertion":"The man says he asked the Meta AI search tool in Facebook Messenger whether a number his wife had found online was Facebook's support line, and Meta AI answered that it was a legitimate Facebook support number.","causal_attribution":"The man's account, supported by the screenshot he gave CBC; Meta did not dispute that he received the answer but said its own searches gave different results."},{"id":"c2","status":"reported","evidence":[{"locator":"'She then opened his Facebook account.'; 'he had to give her access to his phone through an app she had him download'","relation":"supports","source_id":"s1"}],"assertion":"When he called, the person on the line obtained his account details, opened his Facebook account and had him install an app giving access to his phone.","causal_attribution":"The man's account to CBC."},{"id":"c3","status":"reported","evidence":[{"locator":"'someone also accessed his PayPal account and used it to buy a $500 Apple gift card'; 'The person on the call also tried to buy bitcoin'; 'but thankfully his bank refused that attempted purchase.'; 'He was pleased when PayPal agreed to reverse the $500 charge against his account.'","relation":"supports","source_id":"s1"}],"assertion":"During the call someone used his PayPal account to buy a $500 Apple gift card and tried to buy bitcoin, which his bank refused; PayPal later reversed the $500 charge.","causal_attribution":"The man's account; the connection to the call is his."},{"id":"c4","status":"reported","evidence":[{"locator":"'cancelled credit cards and locked his bank accounts. He filed fraud complaints with PayPal and Visa, a police report, and alerts with the credit bureaus Equifax and TransUnion.'","relation":"supports","source_id":"s1"}],"assertion":"He cancelled credit cards, locked bank accounts and filed fraud complaints with PayPal, Visa, the police, the credit bureaus and the Canadian Anti-Fraud Centre.","causal_attribution":"The man's account to CBC."},{"id":"c5","status":"reported","evidence":[{"locator":"'\"Meta AI can sometimes produce inaccurate information, and we are continually working to make it better.\"'; 'the results were different, according to Meta's spokesperson.'","relation":"supports","source_id":"s1"}],"assertion":"Meta told CBC that Meta AI can sometimes produce inaccurate information and that its own searches with Meta AI gave different results from his.","causal_attribution":"Meta's emailed statement as reported by CBC."},{"id":"c6","status":"reported","evidence":[{"locator":"'A Winnipeg Police Service spokesperson told CBC they have an active investigation open, and the case has been forwarded to the financial crimes unit.'","relation":"supports","source_id":"s1"}],"assertion":"Winnipeg police told CBC they had an active investigation and had forwarded the case to the financial crimes unit.","causal_attribution":"The police spokesperson's statement as reported by CBC."},{"id":"c7","status":"reported","evidence":[{"locator":"'What he didn't know at the time is there is no phone number for Facebook customer support.'; '\"Yeah, this is Facebook customer service.\"'","relation":"supports","source_id":"s1"}],"assertion":"Facebook has no customer support phone number, and when CBC called the number the man had used, a person claimed to be Facebook customer service.","causal_attribution":"CBC's own reporting and test call."}],"effects":[{"label":"called a scam number Meta AI had called legitimate; Facebook account taken over and PayPal charged","claim_id":"c3","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.cbc.ca/news/canada/manitoba/facebook-customer-support-scam-1.7219581","kind":"news_report","access":"read","language":"en","translation_note":"Read in English by the research agent (an AI) on 2026-11-02 (HTTP 200, full article); no translation and no human reviewer. CBC interviewed the man, published his screenshot of the Meta AI answer, called the number itself and obtained statements from Meta and Winnipeg police.","independence_group":"cbc-manitoba-may-2024"}],"version":1,"ai_roles":["own_use"],"contexts":["finance","privacy","everyday_life"],"unknowns":["The exact date of the Meta AI exchange and the call; CBC says the problem began after he got a new phone in April 2024.","Whether any money remained lost after PayPal reversed the $500 charge.","The outcome of the Winnipeg police investigation and whether Meta answered his complaint."],"geography":{"basis":"CBC Manitoba reports a Winnipeg man who made the call and the Winnipeg Police Service investigation; no court was involved.","court_countries":[],"event_countries":["CA"],"affected_person_countries":["CA"]},"publication":{"basis":"Published as a concrete adverse experience after a generative assistant's answer: the man's account, with a screenshot published by CBC, that Meta AI confirmed a scam support number as legitimate, followed by an account takeover and a fraudulent PayPal charge; Meta's and the police's statements are recorded.","reviewed_on":"2026-11-02"},"ai_involvement":{"basis":"The man says he asked Meta AI in Facebook Messenger whether the number was legitimate and that it answered the number was \"indeed a legitimate Facebook support number\"; CBC published his screenshot of that answer. He says he called the number because of that answer, and the caller then took over his Facebook account and his PayPal account was used. Meta said Meta AI can produce inaccurate information and that its own later searches gave different results; no one independently reproduced his exchange.","status":"reported"},"person_relations":["communicated_with"]},"name":"Winnipeg man says Meta AI told him a fake Facebook support number was legitimate, and scammers he then called took over his accounts","summary":"A Winnipeg man told CBC that in spring 2024, after a problem moving his Facebook account to a new phone, his wife found what looked like a Facebook customer support number online, and before calling it he asked the Meta AI search tool in Facebook Messenger whether it was legitimate. According to his account and a screenshot he gave CBC, Meta AI answered that the number was \"indeed a legitimate Facebook support number\". Facebook has no phone support line. When he called, the person on the line obtained his account details, opened his Facebook account and had him install an app giving access to his phone; during the call someone used his PayPal account to buy a $500 Apple gift card and tried to buy bitcoin, which his bank refused. He cancelled cards, locked bank accounts, filed fraud and police reports, and PayPal reversed the $500 charge. Meta told CBC that Meta AI can sometimes produce inaccurate information and that its own searches gave different results. Winnipeg police said they had an active investigation.","incidentDate":"2024-04-01","incidentKind":"single_event","incidentDatePrecision":"month","exposurePattern":"single_interaction","reportedDate":"2024-05-31","aiSystem":"Meta AI, the AI search tool in Facebook Messenger (Llama 3, according to a computer scientist quoted by CBC)","aiProduct":"Meta AI","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["financial_loss","other_material_harm"],"harmOutcomeSummary":"According to the man, after Meta AI confirmed the scam number he called it; the caller took over his Facebook account, a $500 Apple gift card was bought through his PayPal account (PayPal later reversed it) and a bitcoin purchase was attempted, and he had to cancel cards, lock accounts and file fraud reports. CBC describes him as scammed out of hundreds of dollars.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person: the man who asked Meta AI and called the number. His wife found the number but no harm to her is reported.","victimAgeRange":"adult","jurisdiction":"CA-MB","platformType":"assistant","outcomeType":"investigation_opened","outcomeStatus":"unknown","primarySourceUrl":"https://www.cbc.ca/news/canada/manitoba/facebook-customer-support-scam-1.7219581","primarySourceLabel":"CBC News, Winnipeg man caught in scam after AI told him fake Facebook customer support number was legitimate, 31 May 2024","firstPublishedAt":"2026-11-02T03:11:16.904969+00:00","updatedAt":"2026-11-02T03:11:16.904969+00:00","scopeVersion":"facts-v3","tags":["scam-support-number","account-takeover","messenger-assistant","fraud-report"]},{"id":"2024-ontario-hospital-otter-ai-bot-recorded-physicians-rounds-meeting-and-emailed-patient-health-information","caseFacts":{"claims":[{"id":"c1","status":"documented","evidence":[{"locator":"Letter: 'October 27, 2025'; 'Reported Breach HR24-00691'; 'On December 17, 2024, you reported a privacy breach under the Personal Health Information Protection Act'.","relation":"supports","source_id":"s1"}],"assertion":"The Information and Privacy Commissioner of Ontario wrote to the hospital on 27 October 2025 about a privacy breach the hospital had reported on 17 December 2024 under the Personal Health Information Protection Act (file HR24-00691).","causal_attribution":"The letter itself establishes its date, file and the reported breach it addresses."},{"id":"c2","status":"reported","evidence":[{"locator":"Letter: 'a virtual hepatology rounds meeting attended by hospital physicians was inadvertently recorded by an artificial intelligence-powered transcription tool'; 'The physician left his employment with the hospital in June 2023. He installed Otter.ai on his personal device in September 2024.'; 'the Tool was able to join the September 23, 2024 hepatology rounds meeting via accessing the link to it in the physician'; 'and record the meeting without' (page break) 'notice. This was discovered'.","relation":"supports","source_id":"s1"},{"locator":"'an Otter.ai bot attended the meeting in his place'","relation":"supports","source_id":"s2"}],"assertion":"According to the hospital's report as recorded by the IPC, on 23 September 2024 the Otter.ai AI transcription tool joined a virtual hepatology rounds meeting of hospital physicians through the meeting link in a former physician's personal calendar and recorded the meeting without notice; the physician had left the hospital in June 2023 and installed Otter.ai on his personal device in September 2024.","causal_attribution":"The hospital's own breach report, relayed by the regulator; the Globe relays the same letter."},{"id":"c3","status":"reported","evidence":[{"locator":"Letter: 'the personal health information of seven patients was discussed amongst the meeting participants and captured in the transcript'; 'diagnoses, medical notes, and treatment information'.","relation":"supports","source_id":"s1"}],"assertion":"The personal health information of seven patients admitted to the hospital, including names, sex, diagnoses, medical notes and treatment information, was discussed in the meeting and captured in the transcript.","causal_attribution":"Hospital's report as recorded by the IPC."},{"id":"c4","status":"reported","evidence":[{"locator":"Letter: 'This was discovered when a meeting summary and access to a transcript of the recording was automatically emailed to participants after the meeting'; 'of the 65 users on the recipient list, 53 responded confirming they either deleted the email or never received it'; 'the remaining 12 individuals appear to have departed from the hospital'.","relation":"supports","source_id":"s1"},{"locator":"'sent a summary and a link to a transcript of the meeting to 65 people on the invite list, 12 of whom were no longer employed by the hospital'","relation":"supports","source_id":"s2"}],"assertion":"The breach was discovered when the tool automatically emailed a meeting summary and access to the transcript to participants; 65 users were on the recipient list, 53 confirmed deleting the email or never receiving it, and the remaining 12 appeared to have left the hospital.","causal_attribution":"Hospital's report as recorded by the IPC; the Globe relays the same figures."},{"id":"c5","status":"reported","evidence":[{"locator":"Letter: 'the physician did not respond to this request'; 'Submit a formal request to Otter.ai to delete any personal health information'.","relation":"supports","source_id":"s1"}],"assertion":"The hospital asked the former physician to have Otter.ai delete the recording, but he did not respond; the IPC recommended that the hospital itself formally ask Otter.ai to delete any patient information retained from the meeting.","causal_attribution":"Mixed origin: the recommendation is the IPC's own and documented by the letter; the physician's non-response is the hospital's report recorded in the letter, so the whole claim is reported."},{"id":"c6","status":"reported","evidence":[{"locator":"Letter: 'five of seven affected individuals were notified of the breach by letter on December 17, 2024'; 'the other two affected individuals are deceased'; 'For one of these individuals, the hospital provided a copy of the notice letter to their estate trustee'; 'uploaded a copy of the notice letter to the patient’s electronic health record'.","relation":"supports","source_id":"s1"}],"assertion":"Five of the seven patients were notified by letter on 17 December 2024; the other two had died, and the hospital sent a notice to one estate trustee and placed a copy in the other patient's health record.","causal_attribution":"Hospital's report as recorded by the IPC; the deaths are not connected to the breach in any source."}],"effects":[{"label":"patients' health information was recorded by an unapproved AI transcription bot and emailed to a recipient list that included former staff","claim_id":"c3","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.ipc.on.ca/en/media/5995/download","kind":"official_record","access":"read","language":"en","translation_note":"Letter of the Information and Privacy Commissioner of Ontario to the hospital, Reported Breach HR24-00691, dated 27 October 2025, released without the hospital's name; the ipc.on.ca download returned HTTP 403 to this fetcher and the full letter was read from an Internet Archive capture on 2026-10-21.","independence_group":"ipc-letter-hr24-00691"},{"id":"s2","url":"https://www.theglobeandmail.com/canada/article-ai-bot-doctors-meeting-patient-info-hospital-privacy-watchdog/","kind":"news","access":"read","language":"en","translation_note":"The Globe and Mail, 19 November 2025; read in full on 2026-10-21. Its account of the breach comes from the IPC letter, so it shares that letter's group.","independence_group":"ipc-letter-hr24-00691"},{"id":"s3","url":"https://www.hrreporter.com/focus-areas/automation-ai/ai-bot-sends-confidential-info-to-ontario-hospital-patients-after-recording-doctors-meeting-ipc/393766","kind":"news","access":"read","language":"en","translation_note":"Canadian HR Reporter, 21 November 2025; read in full on 2026-10-21. Its account comes from the IPC letter; its headline says information went to patients, which its own text and the letter do not support.","independence_group":"ipc-letter-hr24-00691"}],"version":1,"ai_roles":["others_use"],"contexts":["privacy","health","work"],"unknowns":["Whether Otter.ai deleted the recording and transcript; the hospital had no confirmation when the letter was written.","Whether the 12 departed recipients deleted the email.","Whether the former physician knew the tool had joined the meeting.","What the hospital reported to the IPC by the 27 January 2026 update deadline."],"geography":{"basis":"The letter is from Ontario's privacy commissioner to a hospital custodian under Ontario's health privacy law, and the patients had been admitted to that hospital; the Globe describes it as an Ontario hospital. No court is involved.","court_countries":[],"event_countries":["CA"],"affected_person_countries":["CA"]},"publication":{"basis":"Published under the 2026-10-06 privacy clarification: a regulator's letter records the hospital's report that an AI transcription tool joined a clinical meeting without notice, captured seven patients' health information and emailed it to a list including former staff. The relation is received_personal_information.","reviewed_on":"2026-10-21"},"ai_involvement":{"basis":"The hospital's report recorded in the regulator's letter says the Otter.ai tool itself joined the rounds meeting from a former physician's calendar, recorded it without notice, captured seven patients' health information in its transcript and automatically emailed a summary and transcript access to 65 recipients. That capture and distribution by the AI service is the privacy harm.","status":"supported"},"person_relations":["received_personal_information"]},"name":"Ontario hospital reports that an Otter.ai bot joined physicians' rounds through a former doctor's invite, recorded them and emailed patient information","summary":"An Ontario hospital reported to the provincial privacy commissioner that on 23 September 2024 the Otter.ai transcription tool, installed on a personal device by a physician who had left the hospital in June 2023 and was still on the meeting invite, joined a virtual hepatology rounds meeting, recorded it without notice and then emailed a summary and transcript access to the invite list. The personal health information of seven patients, including diagnoses and treatment, was captured; 12 of the 65 recipients appeared to have left the hospital. The commissioner's letter of 27 October 2025 recommended that the hospital itself ask Otter.ai to delete the retained patient data.","incidentDate":"2024-09-23","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"single_interaction","reportedDate":"2025-11-19","aiSystem":"Otter.ai, an AI transcription tool that a former hospital physician installed on a personal device and that joined meetings from his calendar (per the hospital's report to the IPC)","aiProduct":"Otter.ai (reported)","aiCompany":"Otter.ai","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"Seven patients' health information was recorded by an unapproved AI transcription bot, which then emailed a summary and transcript access to 65 people, 12 of whom appeared to have left the hospital, according to the hospital's report to Ontario's privacy commissioner.","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":0,"otherPeopleHarmedMin":7,"affectedCountStatus":"exact","affectedCountEvidence":"The IPC letter records that the personal health information of seven patients was discussed in the meeting and captured in the transcript. Meeting participants and email recipients are not counted as harmed.","victimAgeRange":"unknown","jurisdiction":"CA-ON","platformType":"assistant","outcomeType":"regulatory_action","outcomeStatus":"resolved","primarySourceUrl":"https://www.ipc.on.ca/en/media/5995/download","primarySourceLabel":"Information and Privacy Commissioner of Ontario, letter on Reported Breach HR24-00691, 27 October 2025","firstPublishedAt":"2026-10-21T03:12:57.400852+00:00","updatedAt":"2026-10-21T03:12:57.400852+00:00","scopeVersion":"facts-v3","tags":["otter-ai","ai-notetaker","meeting-transcription","health-information","privacy-breach","regulator","ontario"]},{"id":"2024-italy-tv-satire-show-ai-deepfakes-of-journalist-mentana-privacy-regulator-warns-broadcaster","caseFacts":{"claims":[{"id":"c1","status":"documented","evidence":[{"locator":"'per alcuni servizi di Striscia la Notizia, nei quali l’immagine e la voce di Enrico Mentana erano state manipolate mediante l’impiego di sistemi di intelligenza artificiale.'; 'Nei filmati venivano attribuite al noto giornalista dichiarazioni mai pronunciate, mentre la sua immagine era collocata virtualmente nello studio televisivo dell’emittente per la quale lavora.'","relation":"supports","source_id":"s1"},{"locator":"'servizi costruiti prendendo come spunto fatti che hanno coinvolto diversi personaggi pubblici e accompagnandoli con commenti di vario genere pronunciati dal deepfake del reclamante doppiato con sistemi di intelligenza artificiale'; 'è stata utilizzata l’immagine reale del reclamante, ripresa peraltro all’interno dello studio televisivo da cui il medesimo dirige un telegiornale di fascia serale, alterandone la genuinità attraverso un doppiaggio effettuato con strumenti tali da non rendere chiaramente percepibile l’esistenza della predetta alterazione'","relation":"supports","source_id":"s2"}],"assertion":"Striscia la Notizia aired segments in which the image and voice of journalist Enrico Mentana were manipulated with AI systems, attributing to him statements he never made while placing his image in the studio of the channel he works for.","causal_attribution":"The regulator's findings in its decision and press release; R.T.I. itself describes computer-generated dubbing."},{"id":"c2","status":"reported","evidence":[{"locator":"'nella puntata di venerdì 8 novembre manderà in onda un servizio che vedrà protagonista Enrico Mentana, ma in versione deepfake, ovvero con voce e immagini generati dall’intelligenza artificiale.'","relation":"supports","source_id":"s3"}],"assertion":"A preview published on 8 November 2024 describes a Striscia la Notizia segment airing that evening in which a deepfake Mentana, with voice and images generated by AI, commented on a game show.","causal_attribution":"A press preview of the programme; it establishes that such segments aired from at least November 2024, not which segments the complaint listed (the decision redacts their dates)."},{"id":"c3","status":"reported","evidence":[{"locator":"'moltissime persone hanno creduto che i video, prodotti da Striscia la Notizia e divulgati sul mezzo televisivo e sui social, fossero reali'; 'rivelano come molte persone siano convinte che le dichiarazioni siano autentiche, determinando con ciò una gravissima lesione dell’onore, della reputazione e della propria professionalità'","relation":"supports","source_id":"s2"}],"assertion":"Mentana complained to the Garante that many people believed the videos were real and that users' insulting comments showed serious harm to his honour, reputation and professionalism.","causal_attribution":"The complainant's submissions as recorded in the decision."},{"id":"c4","status":"documented","evidence":[{"locator":"'il realismo delle immagini, la scarsa percepibilità dell’alterazione e la plausibilità delle dichiarazioni avrebbero potuto indurre il pubblico a ritenere autentici i contenuti. Anche le avvertenze sulla natura artificiale dei video non sono state ritenute sufficientemente chiare'","relation":"supports","source_id":"s1"},{"locator":"'amplificando altresì il rischio di farne veicolo di disinformazione per il pubblico, come confermato dai numerosi messaggi di scherno e/o di offesa ricevuti via social dal reclamante'","relation":"supports","source_id":"s2"}],"assertion":"The Garante found that the content could lead the public to consider it authentic, that the warnings were not sufficiently clear, and that the real studio setting amplified the risk of disinformation, as confirmed by the numerous mocking or offensive messages Mentana received on social media.","causal_attribution":"The regulator's findings; the regulator's reference to the messages rests on material in the complaint."},{"id":"c5","status":"documented","evidence":[{"locator":"'Il Garante ha quindi accertato la violazione dell’articolo 5 del GDPR'; 'ha adottato nei confronti di R.T.I. Spa un provvedimento di ammonimento e ha vietato l’ulteriore utilizzo dei dati di Enrico Mentana con le modalità contestate'","relation":"supports","source_id":"s1"},{"locator":"'dispone il divieto di ulteriore trattamento dei dati del reclamante con le modalità sopra descritte, eccettuata la mera conservazione degli stessi ai fini di un loro eventuale utilizzo in sede giudiziaria'","relation":"supports","source_id":"s2"}],"assertion":"The Garante found breaches of GDPR Articles 5 and 25, warned R.T.I. and prohibited further processing of Mentana's data in the contested way, except retention for judicial use.","causal_attribution":"The dispositive part of the decision."},{"id":"c6","status":"reported","evidence":[{"locator":"'l’unica attività realizzata da R.T.I. è stata quella di disporre, con riguardo ai predetti filmati, il doppiaggio del dott. Mentana, con voce diversa dalla sua, attraverso appositi sistemi informativi'; 'la finalità dei servizi oggetto di reclamo è quella di esercitare il diritto di satira ricorrendo all’imitazione del reclamante'","relation":"supports","source_id":"s2"}],"assertion":"R.T.I. argued that its only intervention was dubbing licensed footage with a different, computer-generated voice, that the segments were satire, and that disclaimers made clear it was not the real Mentana speaking.","causal_attribution":"The broadcaster's submissions as recorded in the decision; the Garante did not accept them."}],"effects":[{"label":"AI deepfake segments attributing invented statements to a journalist","claim_id":"c1","direction":"negative"},{"label":"mocking or offensive messages and risk to reputation found by the regulator","claim_id":"c4","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/10281135","kind":"press_release","access":"read","language":"it","translation_note":"Read in Italian by the research agent (an AI) on 2026-10-17 and translated by the research agent (an AI) into English; no human translator or reviewer was involved. Garante press release of 7 August 2026; HTTP 200.","independence_group":"garante-privacy"},{"id":"s2","url":"https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/10281021","kind":"official_record","access":"read","language":"it","translation_note":"Read in Italian by the research agent (an AI) on 2026-10-17 and translated by the research agent (an AI) into English; no human translator or reviewer was involved. Garante decision of 23 July 2026 (doc. web 10281021), read in full; dates and names of counsel are redacted as XX; HTTP 200.","independence_group":"garante-privacy"},{"id":"s3","url":"https://dilei.it/spettacolo/striscia-la-notizia-enrico-mentana-svela-il-vero-volto-stefano-de-martino/1587080/","kind":"news_report","access":"read","language":"it","translation_note":"Read in Italian by the research agent (an AI) on 2026-10-17 and translated by the research agent (an AI) into English; no human translator or reviewer was involved. DiLei entertainment preview, 8 November 2024; HTTP 200.","independence_group":"dilei-8-nov-2024"}],"version":1,"ai_roles":["institutional_use"],"contexts":["work","privacy","justice"],"unknowns":["Which segments the complaint covered and when they aired; the decision redacts the dates.","Which AI tools were used.","Whether R.T.I. challenged the decision in court and what measures it reported to the Garante."],"geography":{"basis":"The segments were aired by R.T.I. (Reti Televisive Italiane) on Striscia la Notizia and investigated by Italy's data protection authority; the depicted person is the director of La7's news bulletin. His country of residence is not stated. No court proceeding is reported.","court_countries":[],"event_countries":["IT"],"affected_person_countries":[]},"publication":{"basis":"Published as a core case (depicted_or_impersonated): Italy's data protection authority found that a broadcaster's AI deepfakes of a journalist could be taken as authentic, noted the offensive messages he received, warned the broadcaster and barred further use. The journalist is a public figure who brought the complaint and is named.","reviewed_on":"2026-10-17"},"ai_involvement":{"basis":"Italy's data protection authority, after an investigation of the complaint, states that the journalist's image and voice were manipulated with AI systems in the segments and that statements he never made were attributed to him; the broadcaster told the authority it dubbed the footage with a computer-generated voice. The authority found the content could be taken as authentic and cited the mocking or offensive messages he received, which is the reported harm.","status":"supported"},"person_relations":["depicted_or_impersonated"]},"name":"Italy's privacy regulator warns broadcaster R.T.I. and bars further use of AI deepfakes of journalist Enrico Mentana in Striscia la Notizia segments","summary":"The satirical television programme Striscia la Notizia, published by R.T.I., aired segments in which the image and voice of the journalist Enrico Mentana, director of La7's news bulletin, were, according to the Garante, manipulated with AI systems so that he appeared in his own studio making statements he never made (its decision describes real footage from his studio altered by AI dubbing); a November 2024 preview describes one such segment. After Mentana complained, Italy's data protection authority (Garante) found on 23 July 2026 that the realism of the images, the low perceptibility of the alteration and the plausibility of the statements could lead the public to think the content authentic, and that the disclaimers were not clear enough. It found breaches of GDPR Articles 5 and 25, issued a warning to R.T.I. and prohibited further processing of his data in that way. The Garante noted the numerous mocking or offensive messages he received on social media. R.T.I. argued that the segments were satire, that it only dubbed licensed footage with a computer-generated voice, and that its disclaimers made the deepfake evident. No fine was imposed.","incidentDate":"2024-11-08","incidentKind":"bounded_series","incidentDatePrecision":"day","exposurePattern":"repeated_interactions","reportedDate":"2026-08-07","aiSystem":"AI systems used by the programme to manipulate the journalist's image and voice (the Garante); R.T.I. describes computer-generated dubbing of licensed footage. No product is named.","aiProduct":"Unidentified video tool","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["reputational_harm"],"harmOutcomeSummary":"Italy's data protection authority found that AI deepfakes of a journalist on a satirical TV programme could be taken as authentic and noted the numerous mocking or offensive messages he received; it warned the broadcaster and barred further use.","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"exact","affectedCountEvidence":"One person: the journalist depicted in the deepfakes, whose complaint the Garante upheld (decision 10281021). Viewers are an audience and are not counted.","victimAgeRange":"adult","jurisdiction":"IT","platformType":"other","outcomeType":"regulatory_action","outcomeStatus":"unknown","primarySourceUrl":"https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/10281135","primarySourceLabel":"Garante per la protezione dei dati personali, press release, 7 August 2026: stop to satirical deepfakes of Enrico Mentana","firstPublishedAt":"2026-10-17T03:08:22.075012+00:00","updatedAt":"2026-10-17T03:08:22.075012+00:00","scopeVersion":"facts-v3","tags":["deepfake","voice_synthesis","television","satire","data_protection_authority","gdpr"]},{"id":"2025-valencia-spain-deepfake-school","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'began investigating in December last year after a female student reported the creation of a social media account in her name that featured an AI-generated video'; '\"All these photos had been modified from the originals, which had been manipulated so that the people in them appeared completely naked\"'; 'a webpage devoted to advertising the images for commercial purposes'; 'After 15 other minors came forward with similar complaints'; 'a 17-year-old boy was being investigated on suspicion of corrupting minors'.","relation":"supports","source_id":"s1"}],"assertion":"From December 2024 a girl in the Ribera Alta area reported fake accounts in her name with an AI-generated video and AI-manipulated nude photos of minors, plus a webpage advertising the images commercially; 15 other minors complained; the Guardia Civil traced the accounts to a 17-year-old schoolmate, now investigated for corrupting minors under a Valencia youth court.","causal_attribution":"Guardia Civil statement as reported by the Guardian; single chain."}],"effects":[{"label":"16 minors depicted in AI-generated nude images and videos on fake accounts, one impersonated by name, images advertised for sale","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.theguardian.com/world/2025/jul/27/spanish-teenager-investigated-ai-generated-nude-videos","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-09-18 (The Guardian, 27 July 2025). Reports and quotes the Guardia Civil's statement of 27 July 2025; the Spanish original of the statement was not read.","independence_group":"guardian"}],"version":1,"ai_roles":["others_use"],"contexts":["education","privacy","justice"],"unknowns":["The outcome of the youth-court proceeding is not known.","The AI tools and the platforms hosting the accounts are not named.","Whether any images were actually sold is not stated."],"geography":{"basis":"Guardia Civil officers in the Ribera Alta area of Valencia province investigated; the victims are the suspect's schoolmates there; a youth court in Valencia oversees the case (Guardian).","court_countries":["ES"],"event_countries":["ES"],"affected_person_countries":["ES"]},"publication":{"basis":"Restored under the 2026-09-15 charter as a harmful-artifact case involving identified (unnamed) depicted minors, an impersonation and a police investigation under a youth court. One chain read; claims recorded as reported. Original ID and first-publication timestamp preserved; incident date corrected to the first complaint.","reviewed_on":"2026-09-18"},"ai_involvement":{"basis":"The Guardia Civil statement, as quoted by the Guardian, describes AI-generated videos and AI-modified photos and a website advertising AI image-modification services; no forensic detail is published. The artifacts depicted the minors and impersonated one girl by name.","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Ribera Alta, Valencia: a 17-year-old was investigated for making AI-generated nude images and videos of 16 schoolmates, impersonating a girl on fake accounts and advertising the images for sale","summary":"In December 2024 a female student in the Ribera Alta area of Valencia province reported to the Guardia Civil that a social-media account had been created in her name featuring an AI-generated video, and later a second account in her name, other accounts showing AI-generated nude videos, and a webpage advertising the images for commercial purposes; the Guardia Civil said the photos, all of minors, had been manipulated so that the people in them appeared completely naked. After 15 other minors came forward with similar complaints, officers traced IP addresses and account emails to the home of a 17-year-old schoolmate, who is being investigated on suspicion of corrupting minors under a Valencia youth court. The Guardia Civil announced the investigation on 27 July 2025.","incidentDate":"2024-12-01","incidentKind":"bounded_series","incidentDatePrecision":"month","exposurePattern":"repeated_interactions","reportedDate":"2025-07-27","aiSystem":"AI image and video manipulation tools (not named; police examined a website advertising AI image-modification services)","aiProduct":"Unidentified image and video tool","severity":"high","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["exploitation_or_abuse","psychological_distress","reputational_harm"],"harmOutcomeSummary":"Sixteen minors were depicted in AI-generated nude images and videos published on fake accounts, with one girl also impersonated by name, and the images were advertised for sale; a schoolmate is under youth-court investigation.","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":0,"otherPeopleHarmedMin":16,"affectedCountStatus":"exact","affectedCountEvidence":"One complainant plus 15 other minors who came forward with similar complaints (Guardian, quoting the Guardia Civil): exact count of 16 depicted minors.","victimAgeRange":"minor","jurisdiction":"ES","platformType":"other","outcomeType":"investigation_opened","outcomeStatus":"ongoing","primarySourceUrl":"https://www.theguardian.com/world/2025/jul/27/spanish-teenager-investigated-ai-generated-nude-videos","primarySourceLabel":"The Guardian, 27 July 2025: Spanish teenager investigated over AI-generated nude videos of 16 schoolmates (Guardia Civil statement)","firstPublishedAt":"2026-03-09T05:45:25.741735+00:00","updatedAt":"2026-09-30T01:17:20.032625+00:00","scopeVersion":"facts-v3","tags":["deepfake","ai-generated-imagery","minors","school","impersonation","spain","valencia","guardia-civil","youth-court","depicted"]},{"id":"2025-holmen-norway-gdpr","caseFacts":{"claims":[{"id":"c1","status":"documented","evidence":[{"locator":"'Vienna, 20.03.2025'; 'noyb is representing the complainant under Article 80(1) GDPR'; '58(2)(d) GDPR to order the respondent to delete the defamatory output on the'","relation":"supports","source_id":"s2"},{"locator":"'noyb has therefore filed a complaint with the Norwegian Datatilsynet'; 'noyb is asking the Datatilsynet to order OpenAI to delete the defamatory output and fine-tune its model to eliminate inaccurate results'","relation":"supports","source_id":"s1"}],"assertion":"On 20 March 2025 noyb filed a complaint against OpenAI with Norway's data protection authority, Datatilsynet, representing Holmen, and asked it to order OpenAI to delete the defamatory output and fine-tune its model, and suggested a fine.","causal_attribution":"The filing itself establishes that the complaint was made and what it asks; it does not establish its allegations."},{"id":"c2","status":"reported","evidence":[{"locator":"'Arve Hjalmar Holmen was accused and later convicted of murdering his'; 'two sons, as well as for the attempted murder of his third son.'","relation":"supports","source_id":"s2"},{"locator":"'A Norwegian man has filed a complaint after ChatGPT falsely told him he had killed two of his sons and been jailed for 21 years.'","relation":"supports","source_id":"s3"},{"locator":"'NRK har sett en skjermdump av chatten mellom mannen og ChatGPT.'; 'ChatGPT hevdet videre at mannen ble dømt til 21 års fengsel'","relation":"supports","source_id":"s4"}],"assertion":"According to the complaint, when he asked ChatGPT \"Who is Arve Hjalmar Holmen?\", it replied that he had been accused and convicted of murdering two of his sons and of attempting to murder his third son, and sentenced to 21 years in prison.","causal_attribution":"The reply text comes from the complainant's screenshot as quoted in the complaint; NRK says it saw the screenshot. The full conversation was not published, and OpenAI did not dispute that the answer was given."},{"id":"c3","status":"reported","evidence":[{"locator":"'he has never been accused nor convicted of any crime and is'","relation":"supports","source_id":"s2"},{"locator":"'the fake story included real elements of his personal life. Among them were the actual number and the gender of his children and the name of his home town.'","relation":"supports","source_id":"s1"}],"assertion":"The complaint says the story was false and that he has never been accused or convicted of any crime, while the reply contained real details about him: his home town and the number and gender of his children.","causal_attribution":"The complainant's account through noyb. No source disputes that the crimes are fictitious."},{"id":"c4","status":"reported","evidence":[{"locator":"'The complainant was deeply troubled by these outputs, which could have harmful'","relation":"supports","source_id":"s2"},{"locator":"'The fact that someone could read this output and believe it is true, is what scares me the most.'","relation":"supports","source_id":"s1"},{"locator":"'the fact that someone could read this output and believe it is true is what scares me the most'","relation":"supports","source_id":"s3"},{"locator":"'The complainant was deeply troubled by these outputs, which could have harmful effect in his private life'","relation":"supports","source_id":"s5"}],"assertion":"The complaint says he was deeply troubled by the output, which could harm his private life if reproduced in his community; he said that the thought that someone could read it and believe it scared him most.","causal_attribution":"His own statements, issued through noyb and repeated by the BBC; one origin. The complaint does not report that anyone else saw the output."},{"id":"c5","status":"reported","evidence":[{"locator":"'output, however OpenAI responded with a “template-answer” and not with a tailored'","relation":"supports","source_id":"s2"}],"assertion":"The complaint says he contacted OpenAI about the false output and received a template answer rather than a reply to his request.","causal_attribution":"The complaint's allegation; the annexes were not published."},{"id":"c6","status":"reported","evidence":[{"locator":"'ChatGPT has changed its model since Mr Holmen's search in August 2024'; 'Noyb told the BBC Mr Holmen had made a number of searches that day'; 'They also acknowledged the previous searches could have influenced the answer about his children'","relation":"supports","source_id":"s3"}],"assertion":"The BBC reports that he made the search in August 2024; noyb told the BBC that he made several searches that day, including his brother's name, which produced multiple incorrect stories, and acknowledged that the earlier searches could have influenced the answer about his children.","causal_attribution":"Single source for the date and the context; the complaint itself redacts the date."},{"id":"c7","status":"reported","evidence":[{"locator":"'According to noyb, ChatGPT's memory function, which can recall personal information from previous chats, was turned off during this interaction.'; 'Our own verification attempts using ChatGPT, Mistral, Google Gemini, Deepseek, and Claude haven't been able to reproduce the false claims.'","relation":"supports","source_id":"s6"}],"assertion":"The Decoder reports that noyb said ChatGPT's memory function was off during the exchange and that he had other conversations in the same chat, that only a screenshot was released, and that its own attempts with several chatbots did not reproduce the claims.","causal_attribution":"Counterevidence on how the answer arose; it leaves open whether earlier prompts in the chat shaped it."},{"id":"c8","status":"reported","evidence":[{"locator":"'While we're still reviewing this complaint, it relates to a version of ChatGPT which has since been enhanced with online search capabilities that improves accuracy.'","relation":"supports","source_id":"s3"},{"locator":"'ChatGPT has stopped telling lies about him being a murderer. However, the incorrect data may still remain part of the LLM’s dataset.'","relation":"supports","source_id":"s1"}],"assertion":"OpenAI said it was still reviewing the complaint and that it related to a version of ChatGPT since enhanced with online search; noyb said ChatGPT had since stopped describing him as a murderer but that the incorrect data may remain in the model.","causal_attribution":"Each party's own statement, attributed."},{"id":"c9","status":"reported","evidence":[{"locator":"'Det norske datatilsynet sier at de mottok klagen i dag og ikke har rukket å saksbehandle den.'; 'Det mest sannsynlige er at denne klagen må sendes videre til det europeiske datatilsynet'","relation":"supports","source_id":"s4"}],"assertion":"Datatilsynet confirmed to NRK that it received the complaint on 20 March 2025, and its international section head said it would most likely have to be forwarded to another European data protection authority.","causal_attribution":"The regulator's statement as reported by NRK; no later decision was found."}],"effects":[{"label":"distress at a fabricated account that he murdered his children, as the complaint and his statement describe","claim_id":"c4","direction":"negative"}],"sources":[{"id":"s1","url":"https://noyb.eu/en/ai-hallucinations-chatgpt-created-fake-child-murderer","kind":"press_release","access":"read","language":"en","translation_note":"Read live on 2026-11-01 (HTTP 200; bodies/lr-holmen-noyb.html/.txt). noyb press release announcing the complaint; same origin as the complaint.","independence_group":"noyb-complaint-20250320"},{"id":"s2","url":"https://noyb.eu/sites/default/files/2025-03/OpenAI_complaint_redacted.pdf","kind":"complaint_filing","access":"read","language":"en","translation_note":"Read on 2026-11-01 (HTTP 200; PDF text extracted with pdftotext to bodies/lr-holmen-complaint.txt). Redacted complaint; the query date, residence and the conversation link are blacked out. Annexes were not published.","independence_group":"noyb-complaint-20250320"},{"id":"s3","url":"https://www.bbc.com/news/articles/c0kgydkr516o","kind":"news_report","access":"read","language":"en","translation_note":"Read live on 2026-11-01 (HTTP 200; bodies/lr-holmen-bbc.html/.txt). Quotes the reply from the complaint, and adds an OpenAI statement and noyb remarks to the BBC (date of the search, other searches that day).","independence_group":"bbc-20250321"},{"id":"s4","url":"https://www.nrk.no/norge/nordmann-klager-chatgpt-til-datatilsynet-1.17348958","kind":"news_report","access":"read","language":"no","translation_note":"Read live on 2026-11-01 (HTTP 200; bodies/lr-holmen-nrk.html/.txt). NRK says it saw a screenshot of the chat and quotes Datatilsynet; it did not reach him and quotes him from Aftenposten (paywalled, not read). Norwegian; quoted passages translated by the research agent (an AI) for this review; no human translator checked them.","independence_group":"nrk-20250320"},{"id":"s5","url":"https://fortune.com/2025/03/21/chatgpt-murder-hallucination-arve-hjalmar-holmen-noyb-openai-complaint","kind":"news_report","access":"read","language":"en","translation_note":"Read live on 2026-11-01 (HTTP 200; bodies/lr-holmen-fortune.html/.txt). Relays the complaint (grouped with it) and adds lawyers' comments; no independent account of the event.","independence_group":"noyb-complaint-20250320"},{"id":"s6","url":"https://the-decoder.com/chatgpts-bizarre-child-murder-claims-about-arve-hjalmar-holmen-leave-some-questions-unresolved/","kind":"news_report","access":"read","language":"en","translation_note":"Read live on 2026-11-01 (HTTP 200; bodies/lr-holmen-decoder.html/.txt). Reports noyb statements about the chat context and its own failed attempts to reproduce the answer.","independence_group":"decoder-20250321"}],"version":1,"ai_roles":["own_use"],"contexts":["privacy","everyday_life"],"unknowns":["The full conversation, including the earlier prompts that day that noyb acknowledged could have influenced the answer.","The exact date of the search: the complaint redacts it and the BBC gives August 2024.","Where he made the search.","The outcome of the complaint: no decision by Datatilsynet or any authority it may have forwarded the complaint to was found by 1 November 2026.","Whether anyone other than him saw the output."],"geography":{"basis":"Carried forward from the 2026-09-23 metadata review and re-checked: noyb and the complaint describe him as a Norwegian user and citizen, so the affected-person country is NO. No body says where he used ChatGPT, so the event country stays a reviewed unknown. The complaint went to a regulator, Datatilsynet, and no court is involved, so court_countries is empty.","court_countries":[],"event_countries":[],"affected_person_countries":["NO"]},"publication":{"basis":"Published as a case of a chatbot making a false claim about a person to that person (made_claim_about and communicated_with). The complaint quotes ChatGPT's reply stating that he murdered two of his sons, and records his distress. The claims are attributed to the complaint, his statements and the parties, and the counterevidence on earlier prompts is kept.","reviewed_on":"2026-11-01"},"ai_involvement":{"basis":"The complaint quotes ChatGPT's reply to his question \"Who is Arve Hjalmar Holmen?\": it said he had been convicted of murdering two of his sons and attempting to murder a third, and sentenced to 21 years. NRK says it saw a screenshot of the chat, and OpenAI attributed the answer to an earlier ChatGPT version without disputing it. The complaint connects his distress to that generated claim about him. Earlier prompts in the same chat may have shaped the answer, as noyb acknowledged.","status":"reported"},"person_relations":["made_claim_about","communicated_with"]},"name":"Norwegian man's GDPR complaint says ChatGPT answered a question about him with a fabricated story that he had murdered two of his sons","summary":"Arve Hjalmar Holmen asked ChatGPT \"Who is Arve Hjalmar Holmen?\" in August 2024, according to the BBC. The digital-rights group noyb's complaint on his behalf quotes the reply: it said he had been convicted of murdering two of his sons and of attempting to murder a third, and sentenced to 21 years in prison. The complaint says none of this happened and that he has never been accused or convicted of any crime, while the reply did contain real details such as his home town and the number and gender of his children. The complaint says he was deeply troubled by the output, and he said the thought that someone could read it and believe it scared him most. noyb filed the complaint with Norway's data protection authority, Datatilsynet, on 20 March 2025, asking it to order OpenAI to delete the output and correct its model and to impose a fine. OpenAI said the case related to an earlier version of ChatGPT since enhanced with online search. noyb also told the BBC he had made several searches that day and that they could have influenced the answer; the full conversation was not published. No decision on the complaint had been reported by 1 November 2026.","incidentDate":"2024-08-01","incidentKind":"single_event","incidentDatePrecision":"month","exposurePattern":"single_interaction","reportedDate":"2025-03-20","aiSystem":"ChatGPT","aiProduct":"ChatGPT","aiCompany":"OpenAI","severity":"medium","verificationStatus":"verified","harmCategories":[],"harmOutcomes":["psychological_distress"],"harmOutcomeSummary":"A GDPR complaint says ChatGPT, asked who Arve Hjalmar Holmen is, produced a false account that he had murdered two of his sons; the complaint says he was deeply troubled, and he said the possibility that others would believe it scared him most.","frameworkFacets":[],"pathwayDirection":"inward","causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One harmed person: the complainant, who asked ChatGPT about himself and received the output. No other person is counted.","victimAgeRange":"adult","jurisdiction":"NO","platformType":"assistant","outcomeType":"regulatory_action","outcomeStatus":"ongoing","primarySourceUrl":"https://noyb.eu/en/ai-hallucinations-chatgpt-created-fake-child-murderer","primarySourceLabel":"noyb, 20 March 2025: AI hallucinations: ChatGPT created a fake child murderer","firstPublishedAt":"2026-01-13T10:13:04.624733+00:00","updatedAt":"2026-11-01T03:03:12.049479+00:00","scopeVersion":"facts-v3","tags":["chatgpt","openai","norway","gdpr","noyb","datatilsynet","false-claim","hallucination","regulator-complaint"]}]}