This is an automated rejection. No LLM generated, assisted/co-written, or edited work.
Read full explanation
If this policy change doesn't alarm you, remember Edward Snowden's words: "Refusing privacy because you have nothing to hide is like refusing free speech because you have nothing to say."
Yesterday Anthropic released a new privacy policy, effective 8 July 2026, with a change of clause that sparked debates. The relevant clause is in Section 3 of Anthropic's Privacy Policy. It says Anthropic may share personal data (meaning your conversations) with government authorities, law enforcement, or other third parties when it has a good-faith belief that disclosure is reasonably necessary to do one of four things: comply with law, regulation, legal process, or an enforceable government request; prevent serious harm to a person or property; detect, prevent, or address fraud or other illegal activity; or enforce its terms and protect the rights, property, security, or safety of Anthropic, its users, or others. What caused this change? The likeliest answer is liability ahead of Anthropic’s IPO. Across late 2025 and into 2026, rival OpenAI was sued repeatedly for not reporting concerning user engagements with their LLM platform ChatGBT. In the Tumbler Ridge school shooting, OpenAI's systems had flagged the shooter's account months earlier for gun-violence planning; an internal safety team reportedly pushed to call the authorities, and the company deactivated the account instead of reporting it. Families sued for negligence. A parallel suit followed over the Florida State University shooting, alongside a state criminal investigation, and more than twenty cases now allege OpenAI failed to act on users moving toward violence or suicide. A clause that explicitly lets a company disclose to law enforcement to prevent serious harm is the direct legal answer to that pattern. It is a cover-your-ass move. Discretionary disclosure is easy to defend when the alternative is a body count. The trouble is that "good-faith belief" and "reasonably necessary" are standards the company applies to itself, and the categories stretch. "Serious harm," "illegal activity," and "the rights of others" mean one thing under independent courts and something else under a government that has criminalized protest, dissent, or being gay. That gap matters more in 2026 than it would have a decade ago. Speech protections are weakening in places that used to feel safe, and "illegal activity" is precisely the phrase that grows to fit whoever holds power. A disclosure pipe built for school shooters is the same pipe a future government reaches for to obtain a journalist's sources, an activist's plans, or a user's reproductive decisions in a jurisdiction that has outlawed them. The pipe does not care what runs through it. The failure mode isn't only authoritarian; it’s also error: Disclosure decisions begin with automated classifiers, and classifiers are context-blind. A novelist drafting a murder, a tabletop player narrating a raid, someone working through dark intrusive thoughts in what they believed was a private space. All trip the same detectors as a real threat. The typical argument by people that don’t understand the important of privacy, “I have nothing to hide”, assumes the system reads you correctly. It often doesn't, and a false positive routed to the police is not a minor inconvenience. Refusing privacy because you have nothing to hide is like refusing free speech because you have nothing to say. For Anthropic, the damage is mostly reputational. It sold itself as the safety-first lab, the one you could trust with what you'd never type into a search bar. A standard police-disclosure clause doesn't make it worse than rivals, but "no worse than OpenAI" is not the brand Anthropic built. And there is a gap worth naming. In a separate, friendlier document on handling government requests, Anthropic says it requires a warrant or subpoena except in imminent-harm emergencies. That promise is stronger than the policy. Promises relax toward the contract when pressure arrives; the binding text is the one that governs. Which is why privacy-minded users keep looking past the cloud. A model running on your own machine has no terms of service, no good-faith clause, and nothing to hand over, because no second party ever sees the conversation. Open-weight models such as Llama, Mistral, Qwen, DeepSeek, Gemma now run locally through tools like Ollama or LM Studio on a strong laptop or a single GPU. The trade-offs are honest: the best local models still trail frontier systems like Claude on the hardest reasoning and coding, you supply your own hardware, and you give up the cloud conveniences such as web access, large-scale context, and agentic connectors. The argument isn't that everyone should self-host. It's that the only conversation a company can't be compelled, or persuaded by its own good faith, to disclose is the one it never receives.
If this policy change doesn't alarm you, remember Edward Snowden's words: "Refusing privacy because you have nothing to hide is like refusing free speech because you have nothing to say."
Yesterday Anthropic released a new privacy policy, effective 8 July 2026, with a change of clause that sparked debates. The relevant clause is in Section 3 of Anthropic's Privacy Policy. It says Anthropic may share personal data (meaning your conversations) with government authorities, law enforcement, or other third parties when it has a good-faith belief that disclosure is reasonably necessary to do one of four things: comply with law, regulation, legal process, or an enforceable government request; prevent serious harm to a person or property; detect, prevent, or address fraud or other illegal activity; or enforce its terms and protect the rights, property, security, or safety of Anthropic, its users, or others.
What caused this change? The likeliest answer is liability ahead of Anthropic’s IPO. Across late 2025 and into 2026, rival OpenAI was sued repeatedly for not reporting concerning user engagements with their LLM platform ChatGBT. In the Tumbler Ridge school shooting, OpenAI's systems had flagged the shooter's account months earlier for gun-violence planning; an internal safety team reportedly pushed to call the authorities, and the company deactivated the account instead of reporting it. Families sued for negligence. A parallel suit followed over the Florida State University shooting, alongside a state criminal investigation, and more than twenty cases now allege OpenAI failed to act on users moving toward violence or suicide. A clause that explicitly lets a company disclose to law enforcement to prevent serious harm is the direct legal answer to that pattern. It is a cover-your-ass move.
Discretionary disclosure is easy to defend when the alternative is a body count. The trouble is that "good-faith belief" and "reasonably necessary" are standards the company applies to itself, and the categories stretch. "Serious harm," "illegal activity," and "the rights of others" mean one thing under independent courts and something else under a government that has criminalized protest, dissent, or being gay.
That gap matters more in 2026 than it would have a decade ago. Speech protections are weakening in places that used to feel safe, and "illegal activity" is precisely the phrase that grows to fit whoever holds power. A disclosure pipe built for school shooters is the same pipe a future government reaches for to obtain a journalist's sources, an activist's plans, or a user's reproductive decisions in a jurisdiction that has outlawed them. The pipe does not care what runs through it.
The failure mode isn't only authoritarian; it’s also error: Disclosure decisions begin with automated classifiers, and classifiers are context-blind. A novelist drafting a murder, a tabletop player narrating a raid, someone working through dark intrusive thoughts in what they believed was a private space. All trip the same detectors as a real threat. The typical argument by people that don’t understand the important of privacy, “I have nothing to hide”, assumes the system reads you correctly. It often doesn't, and a false positive routed to the police is not a minor inconvenience. Refusing privacy because you have nothing to hide is like refusing free speech because you have nothing to say.
For Anthropic, the damage is mostly reputational. It sold itself as the safety-first lab, the one you could trust with what you'd never type into a search bar. A standard police-disclosure clause doesn't make it worse than rivals, but "no worse than OpenAI" is not the brand Anthropic built. And there is a gap worth naming. In a separate, friendlier document on handling government requests, Anthropic says it requires a warrant or subpoena except in imminent-harm emergencies. That promise is stronger than the policy. Promises relax toward the contract when pressure arrives; the binding text is the one that governs.
Which is why privacy-minded users keep looking past the cloud. A model running on your own machine has no terms of service, no good-faith clause, and nothing to hand over, because no second party ever sees the conversation. Open-weight models such as Llama, Mistral, Qwen, DeepSeek, Gemma now run locally through tools like Ollama or LM Studio on a strong laptop or a single GPU. The trade-offs are honest: the best local models still trail frontier systems like Claude on the hardest reasoning and coding, you supply your own hardware, and you give up the cloud conveniences such as web access, large-scale context, and agentic connectors.
The argument isn't that everyone should self-host. It's that the only conversation a company can't be compelled, or persuaded by its own good faith, to disclose is the one it never receives.