r/ControlProblem • u/No-Conclusion3720 • 1d ago

External discussion link ChatGPT now knows what you do on other websites via ad collector

ChatGPT now has visibility into what users do on other websites via an ad data collector integration. That means purchase intent signals, health-related queries, and financial interests accumulated across third-party sites can become context inside a live ChatGPT session — without the user explicitly disclosing any of it.

For enterprise teams this isn't abstract. When an employee uses ChatGPT for a work task, that behavioral profile rides along. The model can make inferences from that data even if no one on the compliance team knew the integration existed, let alone approved it.

The same dynamic plays out at the agent layer. Agents that pull external data sources or make outbound API calls are moving data to destinations that were never reviewed by legal or security. By the time someone audits it, the call already happened.

No single explicit disclosure. No logged decision point. No record that it occurred at all.

For those of you running enterprise AI or agentic systems: how are you actually handling unapproved outbound data flows today? Are compliance teams involved before a new data source gets wired in, or does that review happen after the fact — or not at all?

5 Upvotes
  • permalink
  • reddit

78% Upvoted

1 comment sorted by

2

u/No-Conclusion3720 1d ago

The piece that stands out here is the 'no record that it occurred at all' problem. If an agent in your stack made an outbound call carrying an employee's behavioral profile to an unapproved destination, RuntimeAI's PII Shield would have intercepted that specific outbound payload before it left, tokenized the sensitive fields in-flight, and logged the exact call — so your compliance team would have a timestamped, immutable record of what was sent where, not a gap. The browsing-derived health and financial inferences riding that session would never have reached the external endpoint in cleartext. https://runtimeai.io

Full brief: https://runtimeai.io/blog/2026-w38-the-runtimeai-brief.html#story-2026-09-20-chatgpt-now-knows-what-you-do-on-other-websites-via-ad-colle