[br1brown]

it may have been resolved, but while making the account I - Italian - did not give consent to the dissemination of MY data, and that is not in accordance with the GDPR

now I am not saying that they have to stop making use of my data, but at least notify me how and where my of phone is being used?

[revelio]

They do notify you and explain it:

https://help.openai.com/en/articles/6613520-phone-verificati...

This is also covered under the "consent" lawful basis part of the GDPR.

The bug is not a problem. GDPR covers data leaks. If you're an EU company you have to inform your DPA within 72 hours, and the users affected. It's not illegal to have such breaches. OpenAI isn't an EU company so doesn't have a DPA, but it did notify everyone that the leak occurred anyway.

[br1brown]

yes ok, for the law though there had to be my assent communicated by active action because I could decide that I don't want it to be used for the purposes listed in that article and consequently not get the account

I still don't find the guarantor's request unimpeachable