Korea privacy policy

2023-06-23 · Source: OpenAI News · Field: Legal & Regulatory — Compliance & Risk Management, Regulatory Affairs & Government Relations, Data Privacy · Depth: Intermediate, long

Summary

OpenAI OpCo, LLC updated its Korea privacy policy on June 27, 2025, outlining its practices for collecting, using, and disclosing Personal Data from users of its websites, applications, and services. The policy details the collection of Account Information, User Content (prompts, files, images, audio), Communication Information, and Other Information You Provide. It also covers Technical Information gathered from service use, such as Log Data, Usage Data, Device Information, Location Information, and data from Cookies. OpenAI uses this data to provide, analyze, maintain, improve, and develop its Services, communicate with users, prevent fraud, and comply with legal obligations. Data may be disclosed to vendors, service providers, affiliates, government authorities, and business account administrators, with specific provisions for business transfers and user interactions. The policy also addresses data retention, user rights, and security measures.

Key takeaway

For CTOs or legal compliance officers evaluating vendor data practices, review OpenAI's updated privacy policy to understand its comprehensive data collection, usage, and disclosure frameworks. Pay close attention to the specific data types collected, retention periods, and user rights, especially regarding content used for model training and the disclaimed factual accuracy of model outputs. Ensure your internal policies align with these terms, particularly for business accounts where administrators gain control over user data.

Key insights

OpenAI's updated privacy policy details personal data collection, usage, disclosure, and user rights for its services.

Principles

• Data retention is purpose-driven and time-limited.
• Users have statutory rights to their Personal Data.
• Output factual accuracy is not guaranteed.

Method

OpenAI collects Personal Data directly from user input and indirectly through service usage (e.g., Log Data, Cookies), then processes it for service provision, improvement, security, and legal compliance, with options for users to manage their data.

In practice

• Opt out of Content use for model training.
• Exercise data rights via privacy.openai.com.
• Do not rely on ChatGPT output for factual accuracy.

Topics

• OpenAI Privacy Policy
• Personal Data Collection
• Data Usage & Disclosure
• User Data Rights
• AI Model Training Data

Best for: CTO, VP of Engineering/Data, Director of AI/ML, Legal Professional, AI Ethicist, General Interest

Related on AIssential

• Meta pauses employee tracker for AI training amid privacy concerns — Aggressive internal data collection for AI training can severely undermine employee privacy and trust, leading to program pauses.
• Smart AI Policy Means Examing Its Real Harms and Benefits - Electronic Frontier Foundation — Google uses cookies and data for service delivery, maintenance, security, and audience measurement.
• OpenAI Just Released a Privacy Filter. Here’s What It Can’t Do — One-way PII redaction is insufficient for production LLM pipelines requiring data coherence and reversibility.
• OpenAI Investigated by Coalition of State Attorneys General — State attorneys general are scrutinizing AI companies like OpenAI over data, user impact, and model behavior.
• Your AI Translation Tool Might Be Training on Your Business Data — Here’s What to Do About It — AI translation tools can expose sensitive business data to model training, creating significant GDPR compliance risks.
• How ChatGPT learns about the world while protecting privacy — OpenAI balances model capability gains with privacy through data filtering and user controls.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by OpenAI News.