Incident #794206 · 09 JUN 2026notable
Claude privacy policy adds ID/face verification, agentic third-party data sharing, and broader AI research uses
The privacy policy now covers collecting government ID images and facial geometry for age or identity checks, and research study data. It describes Claude sending your inputs to connected third-party services and acting on your behalf, and expands research uses of data beyond model training. It also adds some commitments, such as response deadlines for rights requests and not re-identifying de-identified data.
Taken from you
- May collect ID document images, photos/video and facial geometry (biometric) data for age or identity verification
- Inputs and outputs may be sent to connected third-party services, with Claude acting on your behalf, and some integrations keep access until disconnected
- You are made responsible for having rights/authority to upload files or grant Claude access to third-party services
- Data may be used for broader AI research such as societal impacts, and aggregated findings may be published
- Study participation data may be combined with other data from your account for aggregated analysis.
- Account may be linked to an employer's enterprise account if you use a work email
- Disclosure to authorities and others now rests on a stated good-faith belief that it is reasonably necessary, and covers law enforcement and an enforceable governmental request.
- Rights requests are now submitted via a 'contacting us' link rather than an email address named in that sentence.
Won back
- Stated response deadline for rights requests (one calendar month under GDPR, extendable by up to two months)
- Commitment not to re-identify de-identified data except as permitted by law
- Clearer explanation of how data flows to and from third-party integrations.
- Stated measures to detect and remove children from the Services
Evidence · 4 of 4 quotes matched in source
If you choose to do so, data we will collect includes, depending on the method: an image of your government-issued identity document and the information appearing on it (such as your ID number and date of birth); your image in photo or video form, facial geometry templates+ inserted · ✓ matched in source
Claude may send your Inputs, Outputs, and instructions to Third-Party Services to perform actions on your behalf (such as reading files, sending messages, or retrieving information).+ inserted · ✓ matched in source
* To improve the Services and conduct research, including training our models and conducting broader research on AI-related topics such as the societal impacts of AI; and+ inserted · ✓ matched in source
Where data is de-identified, Anthropic will maintain and use this information in its de-identified form, and will not attempt to re-identify such information, except as permitted by law.+ inserted · ✓ matched in source
Archived version ↗ · 3,671 words changed