Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The document discloses that enabling the ChatGPT extension routes requests made through Siri, Writing Tools, and Visual Intelligence to ChatGPT, which is a third-party system governed by OpenAI's terms and privacy policies rather than Apple's.
This analysis describes what Apple Intelligence's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses a third-party data routing pathway that is activated when users enable the ChatGPT extension, with data handling for those requests governed by OpenAI's terms rather than Apple's Private Cloud Compute privacy assertions. The disclosure is operationally significant for enterprise device administrators and compliance teams assessing data flows from Apple devices to third-party AI systems.
Interpretive note: The document discloses that the ChatGPT extension routes requests to ChatGPT but does not specify the data categories transmitted, OpenAI's retention practices, or whether a data processing agreement exists between Apple and OpenAI.
Under this clause, enabling the ChatGPT extension results in requests from supported Apple Intelligence features being sent to OpenAI's ChatGPT system, which is subject to OpenAI's separate privacy policy and terms of service rather than the data handling commitments described in this Apple document. The transparency logging feature, when enabled, will also capture these ChatGPT requests in the Apple Intelligence Report.
Cross-platform context
See how other platforms handle ChatGPT Extension Third-Party Data Routing and similar clauses.
Compare across platforms →Monitoring
Apple Intelligence has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Additionally, if you enable the ChatGPT extension, it will include requests sent to ChatGPT when used with supported features, like Siri, Writing Tools, or Visual Intelligence.Excerpt from Apple Intelligence's Privacy Report
(1) REGULATORY LANDSCAPE: This provision engages GDPR requirements for transparency about data transfers to third-party processors or controllers, including Article 13 disclosure obligations. If the ChatGPT extension routes data to OpenAI servers outside the EEA, GDPR Chapter V international transfer requirements may apply. CCPA provisions regarding disclosure of third-party data sharing are also relevant. The EU AI Act's requirements for transparency and third-party AI component disclosure may further engage this provision. (2) GOVERNANCE EXPOSURE: Medium. The disclosure identifies a third-party data routing pathway that is user-activated, but the document does not specify what data categories are transmitted to ChatGPT, what OpenAI's retention practices are, or whether Apple maintains a data processing agreement with OpenAI. This creates a gap in the data flow documentation that compliance teams in regulated industries should assess. (3) JURISDICTION FLAGS: EU and EEA organizations face heightened exposure because any transfer of personal data to OpenAI's systems may constitute an international transfer requiring a lawful transfer mechanism under GDPR Chapter V. Organizations in healthcare, legal, or financial services should assess whether sensitive data categories could be included in requests routed through the ChatGPT extension. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise device administrators should consider whether the ChatGPT extension should be disabled via MDM configuration to prevent unintended third-party data routing. The document does not address whether Apple has a data processing agreement with OpenAI covering data transmitted through the extension, which is a due diligence gap for procurement and vendor assessment purposes. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should update data flow maps to include the ChatGPT extension as a conditional third-party data routing pathway, assess whether enabling the extension is consistent with applicable data handling obligations, and evaluate whether employee use of Apple Intelligence with the ChatGPT extension enabled requires additional disclosure or consent under GDPR or sector-specific frameworks.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision discloses a third-party data routing pathway that is activated when users enable the ChatGPT extension, with data handling for those requests governed by OpenAI's terms rather than Apple's Private Cloud Compute privacy assertions. The disclosure is operationally significant for enterprise device administrators and compliance teams assessing data flows from Apple devices to third-party AI systems.
Under this clause, enabling the ChatGPT extension results in requests from supported Apple Intelligence features being sent to OpenAI's ChatGPT system, which is subject to OpenAI's separate privacy policy and terms of service rather than the data handling commitments described in this Apple document. The transparency logging feature, when enabled, will also capture these ChatGPT requests in the Apple Intelligence …
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Apple Intelligence.