BC OIPC OpenAI Tumbler Ridge Investigation: OpenAI Seeks to Quash Inquiry

• British Columbia's privacy watchdog is investigating OpenAI over its handling of personal information related to the Tumbler Ridge mass shooter.
• OpenAI has filed a petition with the B.C. Supreme Court to quash the investigation or narrow the scope of the OIPC's information request.
• The investigation, which began on June 10, focuses on how personal data provided to ChatGPT via prompts is used and its potential influence on behavior.
• OpenAI previously faced a multi-jurisdictional investigation that found it violated federal and provincial privacy laws, and argues the current probe is duplicative.
• The OIPC's inquiry became public through OpenAI's legal challenge, not an official announcement from the watchdog.

This case underscores the growing regulatory scrutiny on AI companies, particularly concerning data privacy Canada and the handling of sensitive personal information.

British Columbia's privacy watchdog, the Office of the Information and Privacy Commissioner of B.C., has launched an investigation into OpenAI. This inquiry centers on whether the company mishandled the personal information of Jesse Van Rootselaar, the individual identified as the Tumbler Ridge mass shooter earlier this year. The investigation itself was not publicly announced by the OIPC; rather, it came to light through a court petition filed by OpenAI OpCo LLC, the entity behind the widely used ChatGPT large language model.

OpenAI's legal filing seeks an order from the B.C. Supreme Court to quash the investigation, which commenced on June 10. As an alternative, the company requests that the court declare the OIPC's order for document production to be overly broad. The OIPC, a quasi-judicial body empowered to issue legally binding orders on privacy and freedom-of-information matters, acknowledged the investigation on October 27 via a press release, noting the sensitive nature of the case but committing to provide "key information" to the public now that it is in the public domain.

The OIPC's investigation specifically targets how personal information submitted to ChatGPT through user prompts is utilized by the service. This includes scrutinizing the potential for ChatGPT's responses to influence behavior, highlighting the increasing AI regulatory scrutiny B.C. is applying to advanced technologies. The focus on data privacy Canada and the handling of sensitive user data underscores a broader concern among regulators.

The mass shooting in Tumbler Ridge was committed by Jesse Van Rootselaar on February 10. OpenAI stated in its petition that it voluntarily informed police about Van Rootselaar's accounts and subsequently provided her chat logs to the RCMP under legal process, affirming its cooperation with law enforcement agencies in their investigation into the tragedy.

Approximately two weeks after the shooting, the OIPC contacted OpenAI, requesting details on the flagging of Van Rootselaar's violent messages and the company's internal processes for considering disclosure of such information to authorities. OpenAI declined this initial request, asserting that it was not under investigation by the OIPC related to the Tumbler Ridge shooting at that specific time.

This current probe follows a prior, extensive three-year investigation into OpenAI, conducted jointly by the OIPC and its counterparts in other Canadian provinces, including Alberta and Quebec, alongside the national Office of the Privacy Commissioner. The findings of that earlier investigation, released in May, concluded that OpenAI had violated federal and provincial privacy laws. Breaches identified included over-collection of personal information, a lack of consent and transparency, inaccuracies in personal data, limitations on individuals' ability to access and correct their information, and a "general lack of accountability." The OIPC had noted that OpenAI had begun taking steps to address these issues.

OpenAI contends that it should not be subjected to a "duplicative second investigation" so soon after the conclusion of the previous multi-jurisdictional inquiry. The company characterizes the OIPC's current order as "sweeping," demanding extensive document production and compelling an OpenAI representative to answer questions. OpenAI argues that this order is "overbroad and unnecessary," seeking information that is irrelevant to the investigation's scope.

Beyond this OIPC investigation, ChatGPT is also facing other legal challenges, including multiple lawsuits filed by families of victims and survivors, and another initiated by the B.C. government in the U.S. on September 21, 2026. Both sets of lawsuits are currently ongoing, with OpenAI having filed motions to dismiss them. These actions stem from reports published by The Wall Street Journal, which alleged that OpenAI staff had flagged Van Rootselaar's violent messages and sought to contact police, but company leadership reportedly prevented this. Instead, OpenAI banned the account, after which Van Rootselaar created another account and continued planning violent scenarios.

This case underscores the growing regulatory scrutiny on AI companies, particularly concerning data privacy Canada and the handling of sensitive personal information. The proactive stance of the British Columbia privacy watchdog OpenAI highlights the commitment of the Office of the Information and Privacy Commissioner of B.C. to oversee AI technologies and ensure compliance with privacy laws, signaling a critical period for AI governance.

Lawyers and compliance officers should note the increasing regulatory scrutiny on AI companies, particularly regarding the handling of sensitive personal information and the scope of investigative powers. This case highlights the OIPC's proactive stance on AI privacy and the potential for companies to challenge broad information requests, signaling a need for robust data governance frameworks for AI deployments and preparedness for regulatory engagement.

Source: Original reporting based on court filings and OIPC statements.