[LT-05]
The Data Transfer Conflict
Customer support teams using ChatGPT to draft responses face a structural GDPR compliance conflict. Processing customer personal data — names, order IDs, addresses, complaint details — through ChatGPT means transmitting that data to OpenAI's servers, which are located in the United States. Under GDPR Article 46, transferring personal data to a third country requires adequate safeguards: either an adequacy decision, Standard Contractual Clauses, or binding corporat...