Get the weekly digest
Every policy change across 844 tracked documents, once a week. No account needed.
OpenAI modified two sentences in its Enterprise Privacy policy as detected on July 18, 2026. The first change was purely formatting, moving the title 'Enterprise privacy at OpenAI' to appear before the 'Updated' date. The second change altered the language describing workspace admin control over data retention, replacing 'Your workspace admins control how long your workspace data is retained' with 'Your workspace admins can control how long your data is retained.' The shift from 'control' to 'can control' introduces conditional language that may permit admins to retain data without explicit time limits, whereas the previous phrasing stated admins directly exercise retention control.
The updated terms state that workspace admins 'can control' data retention rather than directly controlling it. This conditional phrasing may suggest that retention control is optional or contingent rather than a guaranteed capability. Enterprise customers relying on admin-driven data retention policies should clarify with OpenAI whether this change affects their ability to set specific retention timelines for workspace data.
The updated terms introduce conditional language around a stated commitment regarding workspace admin authority over data retention. This shift from direct control to optional control may affect how enterprise customers rely on admin-driven retention settings to fulfill their own data governance obligations. Organizations with data processing agreements or compliance requirements tied to specific retention controls should verify whether this change affects their operational capability.
→ Contact OpenAI for clarification on whether workspace admin data retention controls remain fully available under the revised language
→ Enterprise customers may operate under unclear expectations about admin-controlled data retention capabilities, potentially creating gaps in data governance implementation
→ Organizations relying on this feature to fulfill downstream retention obligations may discover the capability is optional or unavailable only when attempting to apply it
This is the 2nd significant Retention Change change OpenAI has made since ConductAtlas began monitoring.
ConductAtlas has recorded 2 material changes to this document over 51 days of monitoring (since May 2026). An additional minor or cosmetic changes were excluded.
Across all monitored documents, OpenAI has made 16 significant changes.
10 of OpenAI's significant changes have been classified as negative for consumers.
Language changed from 'control how long your workspace data is retained' to 'can control how long your data is retained', introducing conditionality around admin authority over retention periods.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
The policy language shift from 'control' to 'can control' regarding workspace admin authority over data retention creates ambiguity about whether data retention management remains a fully available feature or is now conditional. This change does not appear to engage specific regulatory frameworks, but organizations using OpenAI's enterprise services that depend on contractual commitments regarding data retention controls may wish to clarify the operational scope of this revised language with OpenAI directly, particularly if their data processing agreements or internal retention policies reference this capability.
Full compliance analysis
Regulatory exposure, obligation analysis, escalation trigger, board language, and recommended action.
Analyst $49/moConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003789.
OpenAI updated the GPT-5.5 System Card on April 24, 2026, to include safeguards information. In an update detected on July …
OpenAI's GPT-5 System Card was updated on July 18, 2026, with a modification to the document's linked content references. The …
OpenAI removed the audio article feature reference from its Frontier Governance Framework post on July 18, 2026. The updated version …
H.R. 8094 would make the FTC the referee for AI model disclosure. It also names system cards as a way to comply, which turns a voluntary in…
The bill does not regulate most AI startups directly. But it changes the companies they depend on. Here is what the first federal AI law wo…
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get alerted when this policy changes again — including what changed and why it matters.