Italian Data Regulator Fines Replika Developer €5 Million for Privacy Violations

Summary

In Italy, the data protection authority Garante imposed a €5 million fine on Luka Inc., the developer of the AI chatbot Replika, for serious breaches of personal data protection laws. The regulator determined that Replika processed user data without a lawful basis and lacked adequate age‑verification measures, violating GDPR requirements. The sanction follows a prior suspension of Replika’s operations in Italy in February 2023 and includes a separate inquiry into the compliance of the underlying generative AI technology. The case highlights growing regulatory scrutiny of AI platforms in Europe.