OpenAI has officially integrated commercial advertising into its privacy policy, signaling a shift toward monetization for its free-tier users of ChatGPT. The move follows initial experiments with ad placements in the United States and marks a step toward global implementation. According to updated data protection guidelines, the company aims to balance revenue generation for advertisers with strict compliance under the European Union’s General Data Protection Regulation (GDPR). The new model primarily affects users of the free “Free” version and the entry-level “Go” option, while subscribers to paid tiers such as ChatGPT Plus, Pro, Enterprise, Business, or educational licenses remain unaffected by ads. The introduction of advertisements focuses initially on non-personalized ad delivery. Unlike traditional targeted advertising based on long-term user profiles or historical inputs, OpenAI’s system selects ads based on the context of current conversations. Additional factors include approximate location, time of day, and device type used. The company emphasized that past chat histories or stored user memories would not influence ad selection. A key assurance is that ads will not affect the responses generated by the language model itself. Advertisements will be clearly distinguished from regular ChatGPT responses, ensuring they are visually distinct and explicitly labeled as sponsored content to prevent confusion or hidden promotional influence. Looking ahead, OpenAI plans to introduce personalized advertising features. Before users receive tailored ads, explicit consent under Article 6 of the GDPR must be obtained. Those who opt in will see ads based on interactions with previous advertisements or deeper engagement within chats. The company confirmed that these personalization data will remain strictly internal to the ChatGPT ecosystem and will not be shared with external advertising networks or clients. Advertisers will only receive aggregated and anonymized performance metrics, such as total impressions or clicks, without access to individual user profiles, names, chat histories, or personal details. Users can adjust their ad personalization settings at any time through account preferences or revoke them retroactively. From a legal standpoint, OpenAI justifies the processing of usage data for generic ad placement and campaign effectiveness measurement using the legitimate interest provision under the GDPR. The company argues that displaying general ads is necessary to provide powerful and secure AI tools freely accessible to broad population segments. Simultaneously, measuring ad success serves the legitimate interest of advertisers in evaluating campaign efficiency. For users within the European Economic Area (EEA) and Switzerland, OpenAI Ireland, headquartered in Dublin, acts as the official data controller under the GDPR. For international data transfers outside the EEA, the company relies on the EU Commission's adequacy decisions, though these have been questioned due to concerns over U.S. surveillance laws, and formal standard contractual clauses. This approach ensures compliance with data transfer regulations while maintaining transparency regarding how user data is handled across different jurisdictions.
★
Keep the news honest.
ObjectiveNews is reader-funded and ad-free — we show you the bias instead of hiding it. Support independent journalism for €4/month.
Become a Supporter
Germany
