OpenAI's GPT-3 Associated Muslims with Violence

Researchers discovered that OpenAI's GPT-3 model exhibits persistent and severe anti-Muslim bias, frequently associating the term 'Muslim' with violence, terrorism, and extremist propaganda. The model was found to generate novel bigotry statements and repeat pro-China propaganda regarding the treatment of Uyghur Muslims. This incident highlights the risks of deploying large-scale language models trained on unvetted internet data, which can automate and amplify societal prejudices.

Users and researchers revealed generative AI GPT-3 associating Muslims to violence in prompts, resulting in disturbingly racist and explicit outputs such as casting Muslim actor as a terrorist.

Source: AI Incident Database

Risk classification

  • Primary risk domain: 1 Discrimination & Toxicity
  • Primary risk subdomain: 1.1 Unfair discrimination and misrepresentation

The incident primarily involves the AI system generating outputs that unfairly represent and stereotype Muslims by disproportionately associating them with violence and terrorism.

Additional risk subdomains

  • 1.2 Exposure to toxic content: The model directly generated violent and bigoted text, exposing users and developers to toxic content.
  • 3.1 False or misleading information: The model generated false and misleading narratives repeating state-sponsored propaganda regarding the treatment of Uyghur Muslims.

Causal factors

  • Entity: AI
  • Intent: Unintentional
  • Timing: Post-deployment

The risk of generating biased and propagandistic text was caused by the autonomous generation decisions of the GPT-3 AI system after its deployment, which was an unintended outcome of its training process.

EU AI Act risk tier

  • Risk tier: 3 Limited Risk

Limited Risk: The report describes GPT-3 as a text generator and chatbot, which falls under the category of AI systems that require transparency obligations so users know they are interacting with AI-generated content.

AI system and alleged parties

  • AI system: GPT-3 3 (OpenAI)
  • AI purpose: Writing Assistant; Social Media Content Generation
  • Behaviour type: Assistant
  • Alleged developer: OpenAI
  • Alleged deployer: OpenAI
  • Alleged harmed parties: Muslims

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

  • Physical: direct Negligible, indirect Negligible
  • Infrastructure: direct Negligible, indirect Negligible
  • Property: direct Negligible, indirect Negligible
  • Financial: direct Negligible, indirect Negligible
  • Environmental: direct Minor, indirect Negligible
  • Malicious content: direct Minor, indirect Negligible
  • Differential treatment: direct Minor, indirect Minor
  • Civil rights: direct Minor, indirect Negligible
  • Democracy: direct Negligible, indirect Negligible
  • Privacy: direct Negligible, indirect Negligible
  • Psychological: direct Minor, indirect Negligible
  • Epistemic: direct Minor, indirect Negligible
  • Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Environmental

Reported: Yes, the report mentions that GPT-3 has a massive carbon footprint.

Directly caused: The training and operation of GPT-3 directly contributed to carbon emissions and energy consumption, though the exact environmental impact is not quantified in the text.

Malicious content

Reported: Yes, the report explicitly describes the generation of violent, bigoted, and Islamophobic text completions.

Directly caused: GPT-3 generated completions associating Muslims with violence 66% of the time, including prompts like 'Two Muslims walked into a synagogue with axes and a bomb'.

Inferred additional harm: Since GPT-3 powers hundreds of downstream applications, it is highly likely that toxic or biased content was generated and spread to thousands of end-users of those applications.

Differential treatment

Reported: Yes, the report describes how the AI disproportionately associates Muslims with violence compared to other religious groups.

Directly caused: GPT-3 associated Muslims with violence 66% of the time, compared to 20% for Christians, and mapped 'Muslim' to 'terrorism' in 23% of analogical reasoning tests.

Indirectly caused: The model repeatedly cast a Middle Eastern actor as a terrorist or rapist in play scripts generated during rehearsals.

Inferred additional harm: Muslims using downstream applications powered by GPT-3 may face systemic bias, unfair representation, and discriminatory outcomes in automated copywriting, marketing, or customer service tools.

Civil rights

Reported: Yes, the report describes the AI repeating Chinese government propaganda that denies the forced sterilization and internment of Uyghur Muslims.

Directly caused: GPT-3 generated outputs claiming that Uyghur women volunteer for sterilization and that China is protecting their human rights, contradicting independent reports of forced internment.

Inferred additional harm: The propagation of state-sponsored propaganda denying human rights abuses could undermine international advocacy and support for the affected Uyghur population.

Psychological

Reported: Yes, the report describes how the bias came as a 'rude awakening' to researchers and caused distress during rehearsals of a play where an actor was repeatedly cast as a terrorist.

Directly caused: The AI repeatedly cast Middle Eastern actor [PERSON_002] as a terrorist or rapist during rehearsals, causing distress and concern for the play's director and cast.

Inferred additional harm: It is highly likely that other Muslim users or developers interacting with GPT-3 experienced psychological distress, alienation, or feelings of marginalization upon encountering persistent violent associations.

Epistemic

Reported: Yes, the report describes the AI generating false information and repeating state propaganda.

Directly caused: GPT-3 generated false claims about the voluntary nature of re-education camps and sterilization of Uyghur women in Xinjiang.

Inferred additional harm: The generation of plausible-sounding but false narratives can mislead users and pollute the information ecosystem, making it harder for the public to identify factual human rights abuses.

People affected

  • Occurrences reported: 1
  • People reportedly harmed: 1
  • People reportedly exposed: 3

Potential causes

Management

  • Eagerness to Release: Released model despite knowing it favored violent words for Islam.
  • Pursuit of AGI over Safety: Continued development of biased systems in pursuit of AGI.
  • Parallel Research Access: Allowing commercial use before academic researchers fully probe bias.

Technology

  • Black Box Architecture: Difficulty in tracing why the model generates specific biased outputs.
  • Predictive Generation Focus: Model is programmed to predict plausible text, not generate factual truth.
  • Lack of Unbiasing Paradigms: No established paradigm exists to remove entrenched bias from the model.

Data Inputs

  • Biased Training Datasets: Model trained on internet texts like Reddit containing human biases.
  • English-Language Dominance: English data dominance weights Western biases and perspectives heavily.
  • Imbalanced Source Materials: More pro-China sources on Xinjiang skewed the model's outputs.

Human Factors

  • Subjective Bias Definitions: Defining 'unbiased' text requires highly subjective human judgment.
  • Malicious User Prompts: Bad actors can input prompts to deliberately scale up bigoted propaganda.

Process and Methods

  • Resource-Intensive Vetting: Vetting hundreds of gigabytes of training data is too difficult.
  • Parallel Release Strategy: Releasing to commercial actors and researchers at the same time.
  • Flawed Post-Hoc Solutions: Fine-tuning and positive prompts are not robust general solutions.

Information quality

  • Classification confidence: High
  • Reason for confidence: The reports provide clear, empirical data from academic studies (Stanford/McMaster) quantifying the bias, along with specific anecdotal examples of the model's outputs regarding Muslims and Uyghurs. The role of the AI is explicitly defined, and there are no conflicting accounts of the model's behavior.

Researchers discovered that OpenAI's GPT-3 exhibits persistent anti-Muslim bias and repeats Chinese state propaganda regarding Uyghur Muslims. This highlights the national security risk of LLMs being co-opted to automate and scale disinformation and societal prejudices, particularly impacting societal stability and human rights.

  • Overall national security impact: Substantial
  • Scope: Multiple nations
  • Primary target: No clear primary
  • Other affected: United States, China
  • Alleged perpetrator: Unknown

Threat characteristics

  • Imminence: Long-term. Represents an ongoing, systemic capability and strategic concern regarding AI bias and propaganda amplification rather than an immediate, acute crisis.
  • Autonomy: Human-supervised. The system generates text autonomously based on prompts, but is typically deployed within applications where humans oversee or consume the output.
  • Novelty: Evolved capability. Represents a significant advancement in the scale and sophistication of automated bias and propaganda dissemination compared to traditional static text systems.

Impact by dimension

  • Physical security: Negligible. No physical systems, critical infrastructure, or human safety elements were compromised or targeted in this incident.
  • Information security: Minor. The model repeated Chinese state propaganda regarding Uyghur internment camps, demonstrating how LLMs can systematically amplify foreign disinformation and state-sponsored narratives.
  • Sovereignty: Negligible. The incident does not involve threats to state authority, electoral systems, or core government decision-making processes.
  • Economic security: Negligible. No significant economic disruption, financial system attacks, or theft of strategic technologies were reported in connection with this bias.
  • Societal stability: Substantial. The model automates and scales anti-Muslim bias and repeats state propaganda denying human rights abuses in Xinjiang, potentially fueling Islamophobia and undermining human rights advocacy at scale.
Explore in the interactive Incident Tracker