OpenAI modified two sentences in its Enterprise Privacy Policy, detected on July 16, 2026. The opening section now includes a formatting change (addition of 'Enterprise privacy at OpenAI' as a header). More substantively, the language describing workspace admin control over data retention was changed from 'Your workspace admins control how long your workspace data is retained' to 'Your workspace admins can control how long your data is retained.' This shifts the framing from an affirmative control right to a permissive capability, and removes the word 'workspace' before 'data,' potentially broadening the scope of data subject to admin control beyond workspace-specific data.
The updated policy now states that workspace admins 'can control' data retention rather than 'control' it, introducing subtle ambiguity about whether retention control is a guaranteed right or a permitted option. Additionally, the removal of the word 'workspace' before 'data' broadens the scope of data potentially subject to admin control beyond workspace-specific information. These changes could affect how enterprise customers understand the extent of their administrative authority over data retention practices.
→ Review existing vendor agreements and data processing addenda with OpenAI to confirm whether the prior language was referenced or incorporated.
ConductAtlas has recorded 2 material changes to this document over 49 days of monitoring (since May 2026). An additional minor or cosmetic changes were excluded.
Across all monitored documents, OpenAI has made 9 significant changes.
5 of OpenAI's significant changes have been classified as negative for consumers.
Language shifted from affirmative 'control' to permissive 'can control,' and scope expanded from 'workspace data' to 'data.'
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
OpenAI has modified language in its Enterprise Privacy Policy regarding workspace administrator control over data retention. The change shifts from affirmative language ('control') to permissive language ('can control') and expands scope from 'workspace data' to …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003719.
OpenAI's GPT-5.5 System Card was updated in an update detected on September 9, 2026. The change modified the metadata and …
OpenAI's GPT-5 System Card was revised in an update detected on September 9, 2026. The change removed the header 'GPT-5 …
OpenAI's Frontier Governance Framework webpage was updated on September 9, 2026. The framework document title header was removed, a loading …
H.R. 8094 would make the FTC the referee for AI model disclosure. It also names system cards as a way to comply, which turns a voluntary in…
The bill does not regulate most AI startups directly. But it changes the companies they depend on. Here is what the first federal AI law wo…
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.