OpenAI’s ChatGPT Mac App Introduces “Computer History” Feature That Tracks User Activity Across Apps
What Happened — OpenAI rolled out a new “Computer History” capability in the ChatGPT Mac application. When enabled, the feature records clicks, typing, keyboard shortcuts, app switches and website visits, building a timeline that can be queried by the model. The data is stored as “memories” and is not captured via screenshots, microphone, or system audio.
Why It Matters for Compliance & Audit Readiness
- The feature creates a continuous stream of user‑level activity data, raising privacy‑by‑design questions under GDPR, CCPA and emerging state laws.
- Organizations must demonstrate lawful basis, granular consent, and the ability to honor data‑subject requests for this type of behavioral data.
- Continuous‑compliance programs need to capture evidence that such AI‑driven data collection is scoped, consented to, and auditable – exactly what Verisq’s CookiePLUS privacy suite helps document.
Who Is Affected – Enterprises that enable ChatGPT Pro, Business or Enterprise accounts on macOS, across sectors such as technology, professional services, finance, healthcare and education.
Recommended Actions
- Conduct a privacy impact assessment (PIA) for the “Computer History” feature before enabling it.
- Map the data‑collection flow to GDPR/CCPA consent controls and update your privacy policy to reflect the new processing activity.
- Verify that your DSAR workflow can locate, retrieve, and delete the “memories” generated by the feature.
- Log the configuration and consent decisions in your continuous‑compliance platform for audit evidence.
Source: ZDNet Security
Technical Notes – The feature leverages macOS accessibility APIs to capture interaction events (clicks, keystrokes, app switches). No screenshots, microphone or audio are recorded. Availability is currently limited to Pro, Business and Enterprise tiers, with rollout to the UK, Switzerland and the EEA pending. Source: OpenAI product page