You cannot use Claude to collect people's private data without permission, access health or biometric information unlawfully, or deceive someone into thinking they are talking to a real human rather than an AI.
Consumer impact (what this means for users)
Users are protected from having their biometric, health, or neural data harvested through Claude, and are entitled to know when they are interacting with an AI rather than a human — a right directly enforceable against any operator deploying Claude.
What you can do
⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
Delete Your Data
If you believe your private, biometric, or health data has been misused through an Anthropic product, email usersafety@anthropic.com describing the specific data and the nature of the misuse. Anthropic's Safeguards Team will review the report.
Cross-platform context
See how other platforms handle Prohibition on Privacy and Identity Compromise and similar clauses.
The explicit inclusion of neural data and the anti-impersonation rule are unusually specific and forward-looking compared to most AI platform AUPs, protecting users against emerging AI-enabled privacy and deception harms.
View original clause language
Violate privacy rights as defined by applicable privacy laws, such as sharing personal information without consent or accessing private data unlawfully... Misuse, collect, solicit, or gain access without permission to private information such as non-public contact details, health data, biometric or neural data (including facial recognition), or confidential or proprietary data... Impersonate a human by presenting results as human-generated, or using results in a manner intended to convince a natural person that they are communicating with a natural person when they are not.
(1) REGULATORY FRAMEWORK: This provision implicates GDPR Arts. 9 and 22 (special category data including biometric and health data), CCPA § 1798.100 and § 1798.140(o) (sensitive personal information including biometric and health data), Illinois BIPA (740 ILCS 14/1, biometric data), the EU AI Act Art. 5(1)(d) (subliminal manipulation prohibition), FTC Act Section 5 (deceptive AI impersonation), and the SHIELD Act (N.Y. Gen. Bus. Law § 899-bb). Neural data protections are specifically addressed in Colorado's HB 24-1058 and emerging neurological privacy frameworks. (2)
🔒
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.