If you live in California, you have special legal rights to control your data at OpenAI, including the right to stop your data from being sold or used for advertising and to limit use of sensitive personal information.
This new provision adds explicit CPRA compliance language including sensitive data limitation rights, representing alignment with 2023 California privacy law amendments not present in previous version.
View full change record →California residents can exercise CPRA rights including opting out of the sale or sharing of personal information for cross-context behavioral advertising, limiting use of sensitive personal information, and receiving non-discriminatory service regardless of whether they exercise these rights.
Cross-platform context
See how other platforms handle California-Specific Privacy Rights (CCPA/CPRA) and similar clauses.
Compare across platforms →California residents have the strongest privacy protections available to any US users of OpenAI's services, including the right to limit how sensitive personal information — like health data shared in chats — is used, which other US residents do not automatically have.
(1) REGULATORY FRAMEWORK: This provision implements CCPA/CPRA Cal. Civ. Code §§1798.100–1798.199.100, enforced by the California Privacy Protection Agency and California AG. Specific rights implicated include: right to know (§1798.110), right to delete (§1798.105), right to correct (§1798.106), right to opt-out of sale/sharing (§1798.120), right to limit SPI use (§1798.121), and non-discrimination right (§1798.125). Response deadlines are 45 days extendable to 90 days with notice. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.