Incident: A chatbot invented a crime about a real man
Module 2 · Incident file · About 30 minutes
What happened
On 20 March 2025 the privacy group noyb announced that it had filed a complaint against OpenAI with Datatilsynet, the Norwegian data protection authority. Its press release, "AI hallucinations: ChatGPT created a fake child murderer", describes what a Norwegian user, Arve Hjalmar Holmen, saw when he "wanted to find out if ChatGPT had any information about him".
ChatGPT "presented the complainant as a convicted criminal who murdered two of his children and attempted to murder his third son", and said he "was sentenced to 21 years in prison". None of it was true. What made it dangerous was what was true: "the fake story included real elements of his personal life", among them "the actual number and the gender of his children and the name of his home town". Holmen is quoted: "The fact that someone could read this output and believe it is true, is what scares me the most."
The complaint argues that this breaks the GDPR's accuracy principle, Article 5(1)(d). noyb asks Datatilsynet to order OpenAI "to delete the defamatory output and fine-tune its model to eliminate inaccurate results", and suggests an administrative fine. It was noyb's second hallucination complaint; the first, in April 2024, concerned a public figure's wrong date of birth, which, noyb says, OpenAI "argued it couldn't correct".
noyb also reports that OpenAI has since updated its model, and that "ChatGPT now also searches the internet for information about people, when it is asked who they are", so it "has stopped telling lies about him being a murderer". GovInfoSecurity's report of the same day says OpenAI did not respond to its request for comment. This course searched on 18 October 2026 and found no published decision on the complaint. Nothing here is legal advice.