OpenAI updated its privacy request procedures on May 14, 2026. Previously, the policy stated users could exercise privacy rights by submitting requests through privacy.openai.com or dsar@openai.com. The updated language now describes the four substantive privacy rights themselves—access, deletion, correction, and freedom from retaliation—rather than the submission mechanism. This shifts the policy from procedural instruction to rights enumeration, establishing explicit recognition of these privacy protections.
medium severity
0Sentences added
0Sentences removed
1Sentences modified
155Sentences before
155Sentences after
Added
Removed
Modified
Before
After
136
You can exercise these privacy rights described in this section by submitting a request through privacy.openai.com (opens in a new window) or to dsar@openai.com .
136
Depending on where you live and subject to applicable exceptions, you may have the following privacy rights in relation to your Personal Data: The right to know information about our processing of your Personal Data, including the right to access your Personal Data, often in a portable format; The right to request deletion of your Personal Data; The right to correct your Personal Data; and The right to be free from retaliation relating to the exercise of any of your privacy rights.
Stay ahead of the changes
Watch this before it changes again
Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.