A European Union data protection taskforce has spent over a year assessing ChatGPT’s compliance with GDPR, but remains undecided on key issues regarding the lawfulness and fairness of OpenAI's data processing.