Nightly News Dominates Demo Performance
OpenAI Faces Investigation by FTC Over Data Security
Table of Contents
The Federal Trade Commission (FTC) is investigating OpenAI, the creator of ChatGPT, over potential data security breaches and risks to consumer privacy, following reports of incidents in late 2023 and early 2024.
Background on the Investigation
The FTC initiated it’s investigation in November 2023, shortly after openai disclosed a bug that allowed ChatGPT Plus subscribers to see titles from another user’s chat history. The FTC issued an order requiring OpenAI to provide information about the incident, as well as its data security practices and policies.
The investigation expanded in January 2024 to include concerns about OpenAI’s handling of user data and its compliance with the FTC Act. The FTC is especially focused on whether openai has adequately protected consumer data and whether its data security practices are reasonable and appropriate for the risks involved. OpenAI acknowledged the investigation in a blog post, stating its commitment to cooperating with the FTC.
Specific Concerns Raised by the FTC
The FTC’s concerns center around several key areas. First, the agency is examining OpenAI’s response to the November 2023 data breach, including the speed and effectiveness of its remediation efforts. Second, the FTC is investigating reports that ChatGPT provided inaccurate information about users, potentially violating privacy laws. Third, the FTC is scrutinizing OpenAI’s data retention policies and its practices for deleting user data. the FTC is assessing whether OpenAI’s terms of service and privacy policy are clear and obvious about how user data is collected, used, and shared.
Exmaple: The November 2023 incident involved approximately 1.2% of ChatGPT Plus users being able to see titles from another user’s chat history for a period of 48 hours. OpenAI detailed the incident and its response in a blog post.
Potential Outcomes of the Investigation
The FTC has a range of potential remedies available if it finds that OpenAI has violated the FTC Act. These include requiring OpenAI to implement stronger data security measures, to provide consumers with greater control over their data, and to pay civil penalties. The FTC could also seek a court order prohibiting openai from engaging in certain practices.
- Federal Trade Commission (FTC): https://www.ftc.gov/ – The U.S. agency responsible for protecting consumers and promoting competition.
- OpenAI: https://openai.com/ – The artificial intelligence research and deployment company behind ChatGPT.
- ChatGPT: OpenAI’s large language model chatbot.
- FTC Act: https://www.ftc.gov/legal-library/browse/statutes-regulations/ftc-act – The primary law governing the FTC’s authority.
Current Status (as of January 17, 2026)
As of January 17, 2026, the FTC investigation remains ongoing. There have been no public announcements of a settlement or enforcement action. The FTC’s website maintains a page dedicated to the OpenAI investigation,wich is updated with new information as it becomes available.Recent reports indicate the FTC is focusing on OpenAI’s data handling practices related to enterprise customers and the potential for misuse of sensitive business information.reuters reported on this expanded focus on January 16, 2026.