OpenAI · Privacy Policy (ROW)

Cross-Border Data Transfers to the United States

High severity
Share 𝕏 Share in Share 🔒 PDF
Watch OpenAI Get alerts when this provision or policy changes.
Watch — $9.99/mo

Why it matters (compliance & risk perspective)

Users in countries with strong data protection laws — particularly the EU and UK — may have their personal data transferred to U.S. jurisdiction where different legal standards apply, including potential access by U.S. government authorities.

Consumer impact (what this means for users)

OpenAI collects a wide range of personal data including your conversation content, device identifiers, location, and information from third-party sources, and may use this data to train its AI models. Users who do not opt out may have their personal conversations — including sensitive topics discussed with ChatGPT — incorporated into future model training. You can opt out of model training by going to your ChatGPT account Settings > Data Controls and disabling 'Improve the model for everyone.'

How other platforms handle this

Shopify Medium

Companies who help us provide you with our services, including cloud storage providers, payment providers and financial institutions, fulfillment partners, security vendors, email providers, marketplaces and data analytics vendors

Stripe Medium

Depending on the context, 'you' might be an End Customer, End User, Representative, or Visitor. End Customers interact with Stripe's services through Business Users (e.g., when purchasing from a merchant). For End Customers, the Business User is the primary data controller and Stripe acts as a data ...

Ticketmaster Medium

We sometimes work with Commercial Partners who we share information with. These are third party data controllers that we work with to provide additional value-add services, such as our travel packages, sponsors or exclusive presale. In some circumstances, where sharing is not necessary for us to per...

See all platforms with this clause type →

This clause could change without notice.

Get alerted when OpenAI updates this policy — with plain-language summaries and severity ratings.

Watch OpenAI Need compliance memos? Professional →
View original clause language
OpenAI is based in the United States. When you use our services, your Personal Data may be transferred to, stored, and processed in the United States or other countries where we or our service providers operate. By using our services, you acknowledge that your Personal Data may be transferred to countries that may not have the same data protection laws as your country of residence.

Applicable regulations

BIPA
Illinois, USA
CCPA/CPRA
California, USA
COPPA
United States Federal
CAN-SPAM
United States Federal
DMA
European Union
FCRA
United States Federal
GDPR
European Union
GLBA
United States Federal
HIPAA
United States Federal
UK GDPR
United Kingdom

Provision details

Document information
Document
Privacy Policy (ROW)
Entity
OpenAI
Document last updated
March 5, 2026
Tracking information
First tracked
March 10, 2026
Last verified
April 27, 2026
Record ID
CA-P-002440
Document ID
CA-D-00006
Evidence Provenance
Source URL
Wayback Machine
SHA-256
f3c083059dff1a3f26f2ce10f0072ca60f38c6921517ae6dd07e528e4bfc7ce2
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: OpenAI | Document: Privacy Policy (ROW) | Record: CA-P-002440
Captured: 2026-03-10 03:38:17 UTC | SHA-256: f3c083059dff1a3f…
URL: https://conductatlas.com/platform/openai/privacy-policy-row/cross-border-data-transfers-to-the-united-states/
Accessed: May 4, 2026
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Don't miss changes to this clause.

OpenAI has updated this policy before. Get alerted on the next change.

Watch OpenAI

Frequently Asked Questions

What does OpenAI's Cross-Border Data Transfers to the United States clause do?

Users in countries with strong data protection laws — particularly the EU and UK — may have their personal data transferred to U.S. jurisdiction where different legal standards apply, including potential access by U.S. government authorities.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.

Is ConductAtlas affiliated with OpenAI?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.