The BBC understands these are related to the chatbot's collection of personal data and its safeguards for underage users.
OpenAI, which powers ChatGPT with vast amounts of internet data, has been given 30 days to present its defense.
Italy has proactively addressed data protection concerns with ChatGPT.
It became the first Western nation to temporarily ban the product in March 2023 due to privacy issues.
However, the chatbot was reinstated about a month after OpenAI reportedly resolved the concerns raised by the DPA.
The Italian DPA's recent findings suggest violations of the EU General Data Protection Regulation (GDPR).
It’s particularly seen in the mass collection of user data for algorithm training and the potential exposure of minors to inappropriate content.
Under GDPR, companies can face fines of up to four percent of their global turnover for non-compliance.
Italy's DPA, working with the European Union's European Data Protection Board, has closely monitored ChatGPT.
Looking to boost your online brand? Create your FREE business profile at WhatBiz? Here
Despite welcoming OpenAI's compliance measures in April 2023, the Italian regulator has called for further action.
It includes implementing an age verification system and a public information campaign to inform Italians about their data rights and the option to opt out of data usage for training algorithms.
Microsoft has invested heavily in OpenAI.
OpenAI has integrated its AI technology into Microsoft's products like Bing, Office 365, Word, Teams, and Outlook.