Your data is not siloed within OpenAI — it is shared with a range of external vendors and partners, expanding the potential exposure of your personal information.
Consumer impact
OpenAI collects a wide range of personal data including your conversation content, uploaded files, device information, and usage patterns, which may be used to train AI models. Third-party service providers and affiliates may receive your data, and cross-border transfers occur for international users. You can opt out of having your conversations used for model training by going to Settings > Data Controls in your ChatGPT account.
Applicable agencies
Federal Trade Commission (ftc)
Oversees unfair or deceptive business practices and can investigate companies that mislead consumers about data collection, sharing, or use.
Who can file: Anyone affected by the company's practices (US or international)
What you need: Your account details, a timeline of relevant events, and a description of the specific issue
What to expect: Complaints inform FTC enforcement priorities and investigations but do not result in individual resolution or compensation
State AGs in California, New York, Texas, and other states can investigate violations of state consumer protection and privacy laws, including CCPA (California), SHIELD Act (New York), and equivalents.
Who can file: Residents of states with comprehensive privacy laws — primarily California, Virginia, Colorado, Connecticut, and Utah
What you need: Evidence of the violation, explanation of how your state rights were affected, and your account or contact information with the company
What to expect: Outcomes vary by state. May result in investigation, enforcement action, or requirement for the company to change practices. No direct individual compensation in most cases.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form