A Big One
OpenAI Gives Workspace Admins The Keys To Employee Chats
A work ChatGPT account can feel like your own private desk. OpenAI’s enterprise privacy terms now say otherwise: workspace admins can view, export, and delete employee conversations, the admin rather than the user sets how long chats are kept, and OpenAI reserves more room to hold data past 30 days. Control over enterprise AI chats is moving from the individual who types them to the organization that owns the workspace.
In human terms: You use your company’s ChatGPT workspace to draft and brainstorm. Under the new terms, your workspace admin can open, export, or delete those conversations, and the admin, not you, decides how long they stay. If you assumed your work chats were yours alone, that assumption no longer holds.
Why this matters: This is part of a steady move from “the user controls their own AI history” to “the organization governs it.” That has real consequences for privacy expectations, for compliance and legal holds, and for anyone who treated a work chatbot like a private scratchpad. The direction, not just this one line, is the story. Keep in mind that nothing in OpenAI’s policies restricts an employer from analyzing, parsing, or even fine-tuning their own internal models on employee conversations.
Read below for the details…
The mechanics
•Admin access to conversations widened:
BEFORE Within your organization, only end users can view their conversations. Workspace admins have control over workspaces and access.
AFTER Within your organization, end users can view their own conversations. Workspace admins have control over workspaces and can view, access, export, and delete end user conversations in the workspace.
•Retention control moved to the organization, and the reason for keeping data longer than 30 days got broader:
BEFORE Each of your end users controls whether their conversations are retained. Any deleted or unsaved conversations are removed from our systems within 30 days, unless we are legally required to retain them.
AFTER Your workspace admins control how long your workspace data is retained. Any deleted or unsaved conversations are removed from our systems within 30 days, unless longer retention is required by law, or is reasonably necessary to protect our services or any third party from harm.
