User Data

User data encompasses information collected, processed, or stored about individuals who interact with AI systems, including personal identifiers, behavioral patterns, and transactional records. Organizations must govern user data through proper consent mechanisms, retention policies, and access controls to comply with regulations like GDPR and CCPA while maintaining customer trust. This data category is critical for AI governance because models trained on or accessing user data require explicit safeguards against unauthorized use, privacy breaches, and discriminatory outcomes.

1 item

Corporate PolicyUS2026-09-09

Anthropic's Activist Surveillance Practices Put Enterprise Vendor Due Diligence at Risk

Investigative reporting from The American Prospect reveals that Anthropic has built an internal surveillance apparatus that monitors and profiles activists, issues pre-crime reports to police, and lists activism alongside terrorism as a threat category subject to intelligence collection. In a separate incident, Anthropic reported a user to law enforcement based on in-platform speech but declined to provide police the actual conversation logs. Enterprise compliance teams deploying Claude now face material questions about vendor data handling, user disclosure practices, and the gap between published privacy policies and operational reality.

Anthropic surveillance vendor due diligence user data law enforcement disclosure civil liberties data governance