The policy prohibits using the platform to collect personal data without authorization, conduct surveillance, or distribute personal information about others without their consent.
This analysis describes what Perplexity AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a prohibited use category that interacts with GDPR, CCPA, and other privacy frameworks, and may be relevant for enterprise users who query the platform using third-party personal data without authorization. The prohibition on 'unauthorized data collection' is not further defined in the document.
Interpretive note: The term 'unauthorized data collection' is not defined in the document, creating ambiguity about the scope of this prohibition as applied to enterprise workflows involving third-party personal data.
Under this clause, users are prohibited from using Perplexity to collect personal data, conduct surveillance, or distribute personal information without consent; violations may result in account termination and independent liability under applicable privacy law.
How other platforms handle this
enableGpcSdk: true, gpcSetting: { privacyPolicyLink: '/Privacy-Security-Policy-a-282.html' }
We process Global Privacy Control signals as opt-out requests for the sale or sharing of personal information.
The Service is intended for general audiences and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your cons...
Monitoring
Perplexity AI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"You may not use Perplexity to violate the privacy of others, including unauthorized data collection, surveillance, or the distribution of personal information without consent.— Excerpt from Perplexity AI's Perplexity Acceptable Use Policy
(1) REGULATORY LANDSCAPE: This provision engages GDPR, CCPA, the Electronic Communications Privacy Act (ECPA), state privacy statutes including the Illinois Biometric Information Privacy Act (BIPA) and the New York SHIELD Act, and the FTC Act's prohibition on unfair or deceptive data practices. The relevant enforcement authorities include the FTC, EU data protection authorities, and state attorneys general. (2) GOVERNANCE EXPOSURE: Medium. The prohibition on 'unauthorized data collection' and 'surveillance' using the platform creates compliance obligations for enterprise users who may query Perplexity using inputs derived from third-party personal data. Organizations should assess whether their prompt inputs constitute unauthorized processing of personal data. (3) JURISDICTION FLAGS: EU and EEA users operating under GDPR face the highest exposure. Illinois users should consider BIPA implications for any biometric data processing involving Perplexity inputs. California users should assess CCPA compliance for queries containing personal information. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise data processing agreements covering Perplexity API use should address the prohibition on unauthorized personal data collection and document the lawful basis for any queries involving personal data. (5) COMPLIANCE CONSIDERATIONS: Organizations should conduct data mapping reviews to confirm that prompt inputs to Perplexity do not include personal data processed without a valid legal basis, and that output handling workflows comply with applicable data minimization and purpose limitation requirements.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes a prohibited use category that interacts with GDPR, CCPA, and other privacy frameworks, and may be relevant for enterprise users who query the platform using third-party personal data without authorization. The prohibition on 'unauthorized data collection' is not further defined in the document.
Under this clause, users are prohibited from using Perplexity to collect personal data, conduct surveillance, or distribute personal information without consent; violations may result in account termination and independent liability under applicable privacy law.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Perplexity AI.