EU users have stronger legal protections than users in other regions, including the ability to challenge how OpenAI uses their data and to escalate complaints to national data protection authorities.
Consumer impact
OpenAI collects a wide range of personal data including your conversation content, uploaded files, device information, and usage patterns, which may be used to train AI models. Third-party service providers and affiliates may receive your data, and cross-border transfers occur for international users. You can opt out of having your conversations used for model training by going to Settings > Data Controls in your ChatGPT account.
Applicable agencies
State Attorney General
State AGs in California, New York, Texas, and other states can investigate violations of state consumer protection and privacy laws, including CCPA (California), SHIELD Act (New York), and equivalents.
Who can file: Residents of states with comprehensive privacy laws — primarily California, Virginia, Colorado, Connecticut, and Utah
What you need: Evidence of the violation, explanation of how your state rights were affected, and your account or contact information with the company
What to expect: Outcomes vary by state. May result in investigation, enforcement action, or requirement for the company to change practices. No direct individual compensation in most cases.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form