OpenAI modified two sentences in its Enterprise Privacy policy as detected on July 18, 2026. The first change was purely formatting, moving the title 'Enterprise privacy at OpenAI' to appear before the 'Updated' date. The second change altered the language describing workspace admin control over data retention, replacing 'Your workspace admins control how long your workspace data is retained' with 'Your workspace admins can control how long your data is retained.' The shift from 'control' to 'can control' introduces conditional language that may permit admins to retain data without explicit time limits, whereas the previous phrasing stated admins directly exercise retention control.
The updated terms state that workspace admins 'can control' data retention rather than directly controlling it. This conditional phrasing may suggest that retention control is optional or contingent rather than a guaranteed capability. Enterprise customers relying on admin-driven data retention policies should clarify with OpenAI whether this change affects their ability to set specific retention timelines for workspace data.
→ Contact OpenAI for clarification on whether workspace admin data retention controls remain fully available under the revised language
This is the 2nd significant Retention Change change OpenAI has made since ConductAtlas began monitoring.
ConductAtlas has recorded 2 material changes to this document over 51 days of monitoring (since May 2026). An additional minor or cosmetic changes were excluded.
Across all monitored documents, OpenAI has made 10 significant changes.
6 of OpenAI's significant changes have been classified as negative for consumers.
Language changed from 'control how long your workspace data is retained' to 'can control how long your data is retained', introducing conditionality around admin authority over retention periods.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
The policy language shift from 'control' to 'can control' regarding workspace admin authority over data retention creates ambiguity about whether data retention management remains a fully available feature or is now conditional. This change does …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003789.
OpenAI's GPT-5.5 System Card was updated in an update detected on September 2, 2026. The updated document removed two older …
OpenAI's GPT-5 System Card was updated in an update detected on September 2, 2026. Two sentences were modified: the precautionary …
OpenAI's Frontier Governance Framework page was revised in an update detected on September 2, 2026. Two sentences were modified: the …
H.R. 8094 would make the FTC the referee for AI model disclosure. It also names system cards as a way to comply, which turns a voluntary in…
The bill does not regulate most AI startups directly. But it changes the companies they depend on. Here is what the first federal AI law wo…
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.