All AI rules
Data
Can I paste customer data into ChatGPT?
Two things decide it, and you need both:
- Your contract with the AI vendor: does it cover this data, and does it keep it out of training?
- Your privacy notice: were the people it describes told their information could be used this way?
What this means for marketers
What your contract and privacy notice allow is the rule; everything else is process. Worth considering: one approved tool, training off, and the decision written down, since the damage usually comes from a rushed paste into a personal account.
Primary source California Attorney General: CCPA (Living agency page)
- IAPP: US state privacy legislation tracker (Tracker, updated continuously)
- NIST AI Risk Management Framework (AI RMF 1.0, January 2023)
Links checked September 25, 2026
How we check this. *Beep Boop Bop 🤖 Never ever, ever legal advice.