The policy states that administrators of ChatGPT Enterprise or business accounts may access and control individual user accounts and their content, and that OpenAI may share account existence and email address with an employer if a work email is used to create a personal account.
This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that employer-level administrators have access to individual user content within enterprise accounts, and separately that OpenAI may disclose account existence to an employer based solely on the email domain used during registration, which may affect employee expectations regarding the separation of personal and professional account data.
The updated policy explicitly discloses that OpenAI receives information from advertisers and other data partners for Free and Go users, and uses this data to personalize ads and measure ad effectiveness. The policy now states that Free and Go users can control what data OpenAI uses to personalize ads through advertising controls in account settings. This represents clarified disclosure of an existing practice rather than a new authorization.
View change record →The updated privacy policy now explicitly states that OpenAI receives information from advertisers and other data partners, which is used to personalize ads shown to Free and Go users and to measure the effectiveness of those ads. For example, the policy notes that OpenAI could receive information about purchases users make from advertisers. The policy now includes a dedicated section on ad personalization and measurement as a primary use of personal data for these user tiers. You can manage what data OpenAI uses for ad personalization by accessing the advertising controls in your account settings or by using the Data Controls option.
View change record →The updated policy now explicitly authorizes OpenAI to promote products and services to users through direct marketing on third-party properties and to share limited information with select marketing partners (who are not service providers) to support these efforts. The policy states that some marketing partners may receive information through cookies and similar technologies. The revised terms establish that these marketing practices are subject to user choices and controls, with additional information and opt-out options available. You can make choices about the use of your information for third-party product promotion purposes through controls referenced in the policy.
View change record →No material change in text; provision name remains identical.
View full change record →Under this provision, users on ChatGPT Enterprise or business accounts should be aware that account administrators may access their content and account controls. Additionally, users who register for any OpenAI account using a work email address may have their account existence and email address disclosed to their employer or organization without a separate notification step.
Cross-platform context
See how other platforms handle Business Account Administrator Access to User Content and similar clauses.
Compare across platforms →"When you join a ChatGPT Enterprise or business account, the administrators of that account may access and control your OpenAI account, including being able to access your Content. In addition, if you create an account using an email address belonging to your employer or another organization, we may share the fact that you have an account and certain account information, such as your email address, with your employer or organization to, for example, enable you to be added to their business account.Excerpt from OpenAI's Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages GDPR and UK GDPR requirements regarding the lawful basis for employer access to employee personal data and the adequacy of notice to data subjects, enforced by EU and UK …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that employer-level administrators have access to individual user content within enterprise accounts, and separately that OpenAI may disclose account existence to an employer based solely on the email domain used during registration, which may affect employee expectations regarding the separation of personal and professional account data.
Under this provision, users on ChatGPT Enterprise or business accounts should be aware that account administrators may access their content and account controls. Additionally, users who register for any OpenAI account using a work email address may have their account existence and email address disclosed to their employer or organization without a separate notification step.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.