OpenAI · Privacy Policy (ROW)

Security Obligations

Medium severity
Share 𝕏 Share in Share

What it is

We implement technical, administrative, and organizational measures designed to protect your Personal Data against unauthorized access, loss, destruction, or alteration. However, no internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

Why it matters

The disclaimer that security cannot be guaranteed means that in the event of a data breach, OpenAI's liability may be limited, and sensitive conversation data could be exposed.

Consumer impact

OpenAI collects extensive personal data including conversation content, audio and image inputs, device identifiers, location data, and usage logs across all its services, and may use this data to train AI models unless users opt out. This creates a meaningful privacy risk because sensitive information shared in conversations β€” health queries, financial details, personal communications β€” could indirectly influence model outputs. You can opt out of conversation data being used for AI training by navigating to Settings > Data Controls in your ChatGPT account and disabling 'Improve the model for everyone'.

Applicable agencies

  • FTC
    The FTC enforces reasonable data security standards under Section 5 of the FTC Act and can take action against companies with inadequate security practices.
    File a complaint →
  • State AG
    State Attorneys General enforce state breach notification laws and can investigate inadequate security practices under state consumer protection statutes.
    File a complaint →

Provision details

Document information
Document
Privacy Policy (ROW)
Entity
OpenAI
Document last updated
March 5, 2026
Tracking information
First tracked
March 10, 2026
Last verified
April 4, 2026
Record ID
CA-P-001987
Document ID
CA-D-00006
Evidence Provenance
Source URL
Wayback Machine
SHA-256
f3c083059dff1a3f26f2ce10f0072ca60f38c6921517ae6dd07e528e4bfc7ce2
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: OpenAI | Document: Privacy Policy (ROW) | Record: CA-P-001987
Captured: 2026-03-10 03:38:17 UTC | SHA-256: f3c083059dff1a3f…
URL: https://conductatlas.com/platform/openai/privacy-policy-row/security-obligations/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document