Forensic GDPR Case · United Kingdom · FC-OPENAI-2026

OpenAI used my therapy
conversations to train AI.
The network traffic proves it.

Network captures, browser cache extraction, and OpenAI's own data export prove that special-category mental health data was fed into the RLHF training pipeline — without consent, without disclosure, and with the opt-out flag set to false after withdrawal.

→ See the Evidence 18 GDPR Violations Case Timeline
160+ Days overdue
DSAR response
18 GDPR violations
documented
7 Scale AI annotation
reviews confirmed
124 Tracking events
per session
0 Art. 28 processor
agreements produced
Four Independent Evidence Sources
Nothing here is inferred. Every claim maps to a raw file.

Network captures, binary cache extractions, and OpenAI's own data export — three forensic layers pointing to one conclusion.

Chrome IndexedDB · Binary Extraction
Scale AI annotation labels found in browser cache
Strings label="MICROSOFT/AZURE" and seven instances of "reviewed" extracted directly from Chrome's IndexedDB — the annotation identifiers used by Scale AI's backend.
HAR Network Capture · No User Action
3 automatic RLHF feedback calls per session
Three POST requests to /implicit_message_feedback fired while simply reading a therapy conversation — no thumbs-up clicked, no rating given.
Session Cookie · OpenAI's Own Data
isOptedOut: false — opt-out not honoured
OpenAI's own session cookie confirms isOptedOut: false despite a stated withdrawal of consent. Training continued unlawfully after opt-out.
conversations.json · Official Export
Undisclosed model processed therapy data
model_slug: gpt-5-2 in OpenAI's own export — therapy conversations processed by an undisclosed model while the UI displayed gpt-4o.

Case Status
Active — filed January 2026, no compliant response
ICO Complaint
IC-474334-N1W1
Active · Information Commissioner's Office
noyb Complaint
#8336742
Active · European Center for Digital Rights
DSAR Status
160+ days overdue
Filed 5 Jan 2026 · Deadline 5 Feb 2026
OpenAI Case Files
04911377 · 05024844
05261783 · 05988760
06092624 · 06185169

Everything here is independently verifiable

All evidence files are SHA-256 hashed and RFC 3161 timestamped via FreeTSA.org. HAR files open in any browser network analyser. conversations.json is OpenAI's own official export format. You don't need to trust this site — verify the files yourself.

How to verify the evidence → File your own DSAR →