OpenAI pays hundreds of contractors to read and rate real ChatGPT conversations under Project Lily, exposing user data despite a Privacy Filter intended to strip personal information. The company did not clearly disclose this practice to users, and a European court ruling established that controllers must inform users before data transfer. Italy has already fined OpenAI €15 million for inadequate legal basis and lack of transparency.