AnalysisPublished 20 Oct 2025

How to configure privacy and security in ChatGPT | Kaspersky official blog

Source Kaspersky Security Blog

Description

A comprehensive guide to configuring privacy and security in ChatGPT: data collection and usage, memory, Temporary Chats, connectors, and account security.

Impact

For European organizations, the primary impact of this advisory lies in the potential exposure of sensitive or personal data through improper configuration of ChatGPT's privacy settings. Given the stringent data protection requirements under GDPR, failure to adequately control data collection, retention, and sharing could result in regulatory non-compliance, reputational damage, and legal penalties. Additionally, if account security is weak, unauthorized access could lead to data leakage or manipulation of AI interactions, which might affect business operations or decision-making processes. While no direct exploitation is reported, the widespread adoption of AI chat services in Europe means that misconfiguration risks are significant. Organizations handling sensitive customer or proprietary information must ensure that ChatGPT is configured to minimize data retention and restrict access, thereby reducing the attack surface and safeguarding confidentiality and integrity.

Defensive guidance

European organizations should implement the following specific measures: (1) Review and apply all recommended privacy settings in ChatGPT to limit data collection and retention, including disabling or regularly clearing memory and temporary chats where possible. (2) Carefully manage connectors and integrations to ensure they do not inadvertently expose data to third parties or external systems. (3) Enforce strong authentication mechanisms for ChatGPT accounts, including multi-factor authentication (MFA) and regular credential audits. (4) Train users on the importance of not sharing sensitive or regulated information within AI chat sessions. (5) Monitor and audit ChatGPT usage logs to detect anomalous access or data flows. (6) Align ChatGPT usage policies with GDPR and other relevant European data protection frameworks, documenting compliance efforts. (7) Stay informed on updates from OpenAI and security advisories to promptly apply any future patches or configuration changes. These steps go beyond generic advice by focusing on configuration nuances specific to AI chat platforms and regulatory compliance.

References

kaspersky.com/blog/chatgpt-privacy-and-security/54607/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 3 Nov 2025, 13:34 UTC

References

Community reviews