Italy’s Garante, one of the EU’s most proactive regulators, has fined the country’s second largest bank, UniCredit, and has launched an investigation of a new OpenAI product. The €2.8 million (~US$3.1 million) UniCredit fine, which the bank plans to appeal, is in response to a 2018 data breach that may have impacted thousands of customers. The OpenAI Sora investigation is to clarify how the new algorithm, which creates short videos from text instructions, is trained, to understand what data it will collect, and to determine compliance with EU regulations.

Singapore has issued guidelines for deterministic AI system use tying in with its Personal Data Protection Act (PDPA). The guidance, which is not legally binding, clarifies how the PDPA will apply when organizations use personal data to train AI.