The policy states that business account administrators can access and control user accounts including user-submitted content, and that OpenAI may share account existence and email address information with an employer when a work email address is used to register.
This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that employer-level administrators have access to employee content submitted through ChatGPT Enterprise or business accounts, and that registration with a work email address may trigger disclosure of account information to the associated employer. This creates material employee privacy considerations and employer compliance obligations that differ from the standard consumer use context.
The updated policy now explicitly discloses that Free and Go users' ads history and interests are collected to measure and improve ad effectiveness. Previously, this collection was referenced more generally. The policy also clarifies that browser data collection applies to the in-app browser rather than a standalone Atlas browser product. You can review your data collection settings in your account controls and export your ChatGPT history and data at any time.
View change record →The updated policy explicitly discloses that OpenAI personalizes ads shown to Free and Go users and measures ad effectiveness using data from advertisers and partners, including information about purchases you make. The policy states this personalization is subject to user controls. You can use the advertising controls in your account settings to control what data OpenAI uses to personalize ads shown on its Services.
View change record →The updated policy now explicitly authorizes OpenAI to share limited personal data with select marketing partners for purposes of promoting OpenAI's products and services on third-party properties and assessing the effectiveness of those efforts. Previously, the policy stated it did not engage in 'targeted advertising' or 'cross-contextual behavioral advertising'; the revised language now permits these activities. Some marketing partners may receive information through cookies and similar technologies. You can opt out using the marketing privacy control in your account settings, the Manage Cookies link on the website, or a legally recognized opt-out mechanism like Global Privacy Control.
View change record →Under this provision, employees using ChatGPT through a business account should be aware that administrators of that account can access their submitted content. Additionally, creating a personal ChatGPT account with a work email address may result in OpenAI disclosing the existence of that account and the associated email address to the employer.
Cross-platform context
See how other platforms handle Business Account Administrator Access to User Content and similar clauses.
Compare across platforms →"When you join a ChatGPT Enterprise or business account, the administrators of that account may access and control your OpenAI account, including being able to access your Content. In addition, if you create an account using an email address belonging to your employer or another organization, we may share the fact that you have an account and certain account information, such as your email address, with your employer or organization to, for example, enable you to be added to their business account.Excerpt from OpenAI's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision engages employment privacy law in various jurisdictions, including state-level employee monitoring disclosure requirements in California, Connecticut, Delaware, and New York.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This provision establishes that employer-level administrators have access to employee content submitted through ChatGPT Enterprise or business accounts, and that registration with a work email address may trigger disclosure of account information to the associated employer. This creates material employee privacy considerations and employer compliance obligations that differ from the standard consumer use context.
Under this provision, employees using ChatGPT through a business account should be aware that administrators of that account can access their submitted content. Additionally, creating a personal ChatGPT account with a work email address may result in OpenAI disclosing the existence of that account and the associated email address to the employer.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.