← Back to insights
AI & Law
Training on user data: how to obtain consent
Using user content for training is not the same as 'necessary to provide the service', and usually needs separate, revocable consent.
Many products want to improve models with user-generated data, but 'providing the service' and 'training the model' are different purposes; the latter usually needs separate, explicit, revocable consent.
Burying the training purpose in a long privacy policy risks invalid consent and both regulatory and trust exposure.
Offer a clear toggle and explanation, default to not training on sensitive data, and let users withdraw and request deletion of their contributed data at any time.