OpenAI added a new statement clarifying that sensitive data is not processed to infer characteristics about users. The policy also changed how users who are not logged in can exercise privacy choices, replacing a reference to 'Manage Cookies' with 'Your Privacy Choices' as the tool for opting out of data processing.
The updated policy now explicitly states that OpenAI does not process sensitive data for the purpose of inferring characteristics about users. This is a clarification rather than a new restriction. Additionally, the policy updated the name of the privacy control interface for users who are not logged in, renaming it from 'Manage Cookies' to 'Your Privacy Choices' to reflect the tool's function more accurately.
The clarification regarding sensitive data non-processing provides explicit transparency about a specific data handling practice. The interface rename improves discoverability and user understanding of available privacy controls by using clearer terminology that reflects the function of the tool beyond cookie management.
→ Users who are not logged in can use the updated 'Your Privacy Choices' link on the website to manage their privacy settings
→ If not reviewed, users may not be aware of the specific clarification regarding sensitive data non-processing
→ Users who are logged out may be unfamiliar with the renamed 'Your Privacy Choices' control but the underlying opt-out mechanism remains available
Explicitly states that OpenAI does not process sensitive data for inferring personal characteristics.
Renamed privacy opt-out mechanism from 'Manage Cookies' to 'Your Privacy Choices' for logged-out users.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
This change comprises a clarification statement and a UI nomenclature update. The clarification regarding sensitive data non-processing is primarily informational and aligns with standard privacy practice principles but creates no new technical, operational, or compliance obligations. The interface rename from 'Manage Cookies' to 'Your Privacy Choices' is a UX update that may improve user understanding of available controls but does not alter the substantive mechanism or scope of opt-out authority. No regulatory escalation appears necessary unless the organization operates under specific data protection regimes that require explicit statements about sensitive data handling.
GDPR (if EEA users are affected), CCPA (if California residents are affected), and general FTC Act prohibitions on unfair or deceptive practices. The clarification statement aligns with standard expectations under these regimes but does not create new exposure.
Full compliance analysis
Obligation analysis, escalation trigger, board language, and recommended action.
Monitor: regulatory citations + obligations. Compliance: full compliance memo.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-001559.
See the full side-by-side comparison of every sentence added, removed, and modified.
🔒 Full diff — MonitorAd personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
872 provisions across 8 AI platforms. The terms your AI provider sets become the terms your product operates under.
OpenAI expanded its data sharing terms to include third-party marketing partners. The updated policy authorizes the use of personal data fo…
Get alerted when this policy changes again — including what changed and why it matters.
Prefer a weekly summary instead?
Get the biggest policy changes across 320+ platforms every Sunday.