California residents have legal rights under the CCPA to know what data OpenAI holds about them, request its deletion, and opt out of any data sales, though OpenAI states it does not sell personal data as defined by CCPA.
This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause operationalizes California's statutory privacy framework by specifying the mechanism for exercising CCPA rights and clarifying OpenAI's position on data sales practices. This establishes the procedural framework through which residents can assert their legal entitlements under state law.
The updated policy explicitly discloses that OpenAI receives information from advertisers and other data partners for Free and Go users, and uses this data to personalize ads and measure ad effectiveness. The policy now states that Free and Go users can control what data OpenAI uses to personalize ads through advertising controls in account settings. This represents clarified disclosure of an existing practice rather than a new authorization.
View change record →The updated privacy policy now explicitly states that OpenAI receives information from advertisers and other data partners, which is used to personalize ads shown to Free and Go users and to measure the effectiveness of those ads. For example, the policy notes that OpenAI could receive information about purchases users make from advertisers. The policy now includes a dedicated section on ad personalization and measurement as a primary use of personal data for these user tiers. You can manage what data OpenAI uses for ad personalization by accessing the advertising controls in your account settings or by using the Data Controls option.
View change record →The updated policy now explicitly authorizes OpenAI to promote products and services to users through direct marketing on third-party properties and to share limited information with select marketing partners (who are not service providers) to support these efforts. The policy states that some marketing partners may receive information through cookies and similar technologies. The revised terms establish that these marketing practices are subject to user choices and controls, with additional information and opt-out options available. You can make choices about the use of your information for third-party product promotion purposes through controls referenced in the policy.
View change record →California residents can submit data access or deletion requests at privacy.openai.com or by emailing privacy@openai.com, and are protected from service denial or price discrimination for exercising these rights.
How other platforms handle this
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
Not be Discriminated Against by us for exercising your privacy rights.
You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.
"If you are a California resident, you have the right to: Know what personal information we collect, use, disclose, and sell. Delete your personal information. Opt out of the sale of your personal information. Non-discrimination for exercising your privacy rights. We do not sell your personal information as defined under the CCPA. You may submit a request to exercise your rights by contacting us at privacy@openai.com or by submitting a request through our Privacy Portal.Excerpt from OpenAI's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision reflects obligations under the California Consumer Privacy Act (CCPA) as amended by CPRA, enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The clause operationalizes California's statutory privacy framework by specifying the mechanism for exercising CCPA rights and clarifying OpenAI's position on data sales practices. This establishes the procedural framework through which residents can assert their legal entitlements under state law.
California residents can submit data access or deletion requests at privacy.openai.com or by emailing privacy@openai.com, and are protected from service denial or price discrimination for exercising these rights.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.