OpenAIがゼロデータ保持のまま不正検知、CSAM画像だけは残る

"Zero Data Retention gives eligible API customers a clear promise: OpenAI does not retain their prompts or model responses after a request is processed. Customer content is not available to OpenAI personnel for review1, and enterprise customer data is not used to train our models unless customers explicitly opt-in."／"Private Safety Processing is designed so we can continue to offer ZDR."（冒頭／Why safety systems need to evolve 節）— OpenAI 公式発表より

"As models take on longer, more complex tasks, some serious risks may only become visible across multiple interactions. Existing ZDR-compatible safety systems evaluate each interaction individually. Today, we're previewing Private Safety Processing, which is designed to identify patterns across related interactions without giving OpenAI personnel access to the underlying content."／"The most serious AI safety risks are not always visible in a single interaction. Often, potentially harmful intentions become clear only when multiple interactions are viewed together. Similar risks can arise when bad actors repeatedly probe safeguards, coordinate across accounts, or disguise threats as routine research. Risks can also develop over the course of an agentic task—for example, if a system becomes misaligned with the user's intent by continuing to act after being told to stop."（冒頭／Why safety systems need to evolve 節）— OpenAI 公式発表より

"For ZDR deployments, customer content remains on infrastructure the customer controls. We are also developing an option in which content is stored on OpenAI infrastructure, encrypted with keys controlled by the customer. In both cases, automated systems can identify potential misuse and return limited safety signals without exposing the underlying prompts or responses to OpenAI personnel."／"Private Safety Processing utilizes customer content regardless of where it is stored—whether in infrastructure customers control (ZDR deployments) or in storage provided by OpenAI. With OpenAI-provided storage, customer content is encrypted using keys controlled by the customer. OpenAI personnel do not have a copy of those keys, so they cannot access the underlying content."／"When a risk is identified, OpenAI receives a narrowly defined signal indicating the type of activity involved, similar to our existing safety systems today. That signal can be used to determine whether enforcement is necessary. OpenAI personnel do not receive access to the customer content even when it is flagged."／"Customers can investigate alerts and enforcement decisions using information available in their own systems. If they want to appeal, clarify legitimate activity, or support an investigation into verified abuse, they can choose to share relevant information with OpenAI."（冒頭／How Private Safety Processing works 節）— OpenAI 公式発表より

"Like other frontier model providers, OpenAI is required by law to report apparent child sexual abuse material (CSAM). Images flagged for potential CSAM will continue to be retained for manual review and reporting purposes, even in Zero Data Retention deployments, as they are today."（脚注1）— OpenAI 公式発表より

"Some recent frontier-model deployments have required customers to allow their AI provider to retain sensitive content for safety monitoring. For many organizations, such requirements conflict with their security obligations or commitments to the people they serve."／"Private Safety Processing is currently being tested with early customers. We are sharing this preview now because we've heard our customers loud and clear that they need predictability about how their content will be protected as AI systems become more capable."／"We plan to start rolling out Private Safety Processing, and share a technical white paper, in September."（Why safety systems need to evolve ／ How Private Safety Processing works ／ Privacy and safety built with and for our customers 節）— OpenAI 公式発表より

"Organizations already approved for Zero Data Retention can set up ZDR with PSP directly in the API console."／"ZDR with PSP is enabled per project."／"For the full architecture and security model, see the Private Safety Processing technical white paper."

"Anthropic meanwhile has noted that its implementation of ZDR includes a non-zero amount of data retention for covered models – currently Mythos 5 and Fable 5. For commercial customers using ZDR as of June 9, 2026,"／"Anthropic allows more room for human review when content is flagged by its automated systems."／"The major distinction now is ZDR and how the two frontier AI companies define that concept."— The Register の報道より