Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy establishes that agentic sessions, in which Claude performs multi-step tasks including sending communications, modifying files, or interacting with third-party services on the user's behalf, generate Inputs and Outputs that Anthropic collects, and that personal data included in Inputs may be reproduced in Outputs.
This analysis describes what Anthropic's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that data generated during agentic sessions, including instructions that result in actions in external systems, is collected as part of the Services and may be used for the purposes described in the policy including model training. The scope of data collection extends to any personal data included in instructions or retrieved from connected third-party services.
Interpretive note: The policy does not specify retention periods or separate handling procedures for personal data retrieved from third-party services during agentic sessions, as distinct from user-authored Inputs.
Under this clause, content submitted during agentic sessions, including instructions directing Claude to act in external services, is collected by Anthropic as Inputs and is subject to the same data use terms as other conversational content, including potential model training use unless opted out.
Cross-platform context
See how other platforms handle Agentic Session Data Collection and Third-Party Actions and similar clauses.
Compare across platforms →Monitoring
Anthropic has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"You are able to interact with our Services in a variety of formats, including but not limited to chat, coding, agentic sessions (where Claude performs multi-step tasks or takes actions on your behalf), and connected services. The content you submit to the Services through these interactions, including via third-party applications, services, and content you choose to upload, integrate or interact with using our Services, are your 'Inputs'. Inputs generate responses and actions ('Outputs'). If you include personal data or reference external content in your Inputs, we will collect that information and it may be reproduced in your Outputs. Depending on the permissions you grant Claude, some Outputs may result in actions with effects outside the Services, such as sending communications, modifying files, or interacting with third-party services on your behalf.Excerpt from Anthropic's Privacy Policy (Superseded Capture)
REGULATORY LANDSCAPE: This provision implicates GDPR data minimization principles (Article 5) and purpose limitation requirements where agentic sessions retrieve or process personal data from connected third-party services. The FTC Act applies to representations about data collected through agentic interactions. The EU AI Act may engage additional requirements for agentic AI system transparency and disclosure depending on classification of the system. GOVERNANCE EXPOSURE: Medium. The collection of personal data from third-party services accessed by Claude during agentic sessions may result in Anthropic holding personal data about individuals who did not directly interact with Anthropic's services, which creates secondary data subject rights exposure under GDPR and CCPA. JURISDICTION FLAGS: EU and EEA (GDPR data minimization and purpose limitation for third-party personal data retrieved by agentic processes), California (CCPA rights of individuals whose data is retrieved by agentic systems), any jurisdiction in which third-party services accessed by Claude are subject to local data protection law. CONTRACT AND VENDOR IMPLICATIONS: Enterprise procurement teams enabling agentic Claude integrations under consumer terms should assess whether third-party service connections established through agentic sessions create data controller or processor relationships with obligations beyond those disclosed in this policy. The policy states Anthropic is not responsible for the data practices of Third-Party Services accessed through integrations. COMPLIANCE CONSIDERATIONS: Legal teams should assess data mapping requirements for personal data retrieved from third-party services during agentic sessions, including whether such data is subject to deletion rights requests and how it is handled in the model training opt-out context. Organizations deploying agentic Claude functionality should review whether employee or customer personal data may be retrieved and collected by Anthropic during task execution.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes that data generated during agentic sessions, including instructions that result in actions in external systems, is collected as part of the Services and may be used for the purposes described in the policy including model training. The scope of data collection extends to any personal data included in instructions or retrieved from connected third-party services.
Under this clause, content submitted during agentic sessions, including instructions directing Claude to act in external services, is collected by Anthropic as Inputs and is subject to the same data use terms as other conversational content, including potential model training use unless opted out.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Anthropic.