---
title: "List what a commercial AI product says it collects"
url: "https://ailawframework.com/practice/privacy-data-protection-and-cyber/assess-privacy-compliance-of-a-commercially-available-ai-product/united-states"
type: "task_jurisdiction_version"
site: "AI Law Framework"
id: "A25-B8-1-US"
practice_area: "Privacy, Data Protection & Cyber"
tier: "yellow"
lawyer_review: "required"
jurisdictions: ["US"]
last_reviewed: "2026-10-22"
---

# List what a commercial AI product says it collects

> From the product description or the settings page the lawyer supplies, copy the categories of personal information the product says it collects, the purposes it states, and any statement that information is sold or…

Canonical page: https://ailawframework.com/practice/privacy-data-protection-and-cyber/assess-privacy-compliance-of-a-commercially-available-ai-product/united-states  
Last reviewed: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Privacy, Data Protection & Cyber](https://ailawframework.com/practice/privacy-data-protection-and-cyber.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | From the product description or the settings page the lawyer supplies, copy the categories of personal information the product says it collects, the purposes it states, and any statement that information is sold or shared. Write no sentence that the product complies. |
| What the lawyer must review | Section 1798.100(a), (c), and (e) are the duties a business that controls collection has to check this description against. The product description is not that notice, and it is not a finding of reasonable security. Section 1798.81.5, which subsection (e) incorporates, was not opened. Opinion 512 and Model Rule 1.6: do not paste client matter information into the product to test it unless the client has agreed and the tool does not disclose it. |
| Written for | United States |
| Applies to | [Assess privacy compliance of a commercially available AI product](https://ailawframework.com/practice/privacy-data-protection-and-cyber/assess-privacy-compliance-of-a-commercially-available-ai-product.md) |

## Checking plan

- What the AI does: From the product description or the settings page the lawyer supplies, copy the categories of personal information the product says it collects, the purposes it states, and any statement that information is sold or shared. Write no sentence that the product complies.
- Basis: Checked against the linked sources on 22 October 2026. Confirm the current instrument before reliance.

## Notes

- A vendor description can be narrower than what the product actually collects. You test that. The copy does not.
- This list is not the contract review. Contract clauses are a separate task.

## Sources

- [California Civil Code section 1798.100 (duties of businesses that collect personal information)](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.100.) (checked 2026-10-22)
- [California Attorney General: California Consumer Privacy Act (CCPA)](https://oag.ca.gov/privacy/ccpa) (checked 2026-10-22)
- [ABA Formal Opinion 512, Generative Artificial Intelligence Tools (29 July 2024)](https://www.americanbar.org/content/dam/aba/administrative/professional_responsibility/ethics-opinions/aba-formal-opinion-512.pdf) (checked 2026-10-22)

## Forms and precedents for this task

| Form or precedent | Kind | AI level | Summary |
| --- | --- | --- | --- |
| [Security and destruction of personal information under APP 11](https://ailawframework.com/precedents/privacy-data-protection-and-cyber/app-11-security-steps.md) | Checklist | Yellow | Checklist of APP 11.1 and APP 11.2 from the OAIC chapter updated on 3 October 2025, including the matters the chapter says bear on reasonable steps. |

Signed-in accounts can read the full text of each one.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*