Mistral AI Faces Data Privacy Controversy Over Chatbot ‘Le Chat’

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

Mistral AI has been accused of exploiting users' personal data without proper consent mechanisms. A complaint was filed with France’s CNIL over the absence of opt-out options in the free version of its AI chatbot, 'Le Chat', raising serious concerns about its adherence to data protection laws and user privacy.[AI generated]

Why's our monitor labelling this an incident or hazard?

The report describes a real complaint filed to the French data protection authority (CNIL) alleging that an AI system (Le Chat) actively exploited personal data without proper consent, constituting a violation of users’ fundamental privacy rights under applicable law. This is a concrete AI‐driven harm (GDPR violation), so it qualifies as an AI Incident.[AI generated]
AI principles
Privacy & data governanceRespect of human rightsTransparency & explainabilityAccountability

Industries
Consumer servicesMedia, social platforms, and marketing

Affected stakeholders
Consumers

Harm types
Human or fundamental rightsReputational

Severity
AI incident

Business function:
Citizen/customer serviceResearch and development

AI system task:
Interaction support/chatbotsContent generation


Articles about this incident or hazard