United StatesTechnology and telecom2023–2025Luka Inc. (Replika)
Replika AI companion chatbot
Italy's data authority fines Replika maker Luka €5 million over missing legal basis and age checks
Problem
The Garante found Luka had not identified a legal basis for Replika's data processing as of 2 February 2023. It also had an inadequate privacy policy and no age verification, although it said minors were excluded.
Approach
The authority had blocked the app in February 2023. Its decision of 10 April 2025, announced on 19 May, set a €5 million fine and required GDPR compliance. It opened a separate probe into the generative AI model behind Replika.
Results
Takeaway
Luka faced a fine for missing safeguards, including age checks, despite saying it excluded minors. Luka's appeal was pending when the decision was announced.
Categories
- Size
- Small business
- Industry
- Technology and telecom
- Business function
- IT and R&DCustomer service
- Innovation type
- Product and service innovation
- AI technology
- Conversational and voice AIGenerative AI
- Adoption
- Built in-house
- Evidence
- Regulator, audit or court
Sources
Source summaries
The regulator imposed a €5 million fine for data-protection failures and opened a new investigation into the AI model. The sanction followed its decision dated 10 April 2025.
Full details are in the original sources.