Since the launch of ChatGPT it is impossible to change the phone number associated with an OpenAI/ChatGPT account after initial verification. Multiple users have emphasized the problem: when their verified phone number becomes inaccessible or outdated, users have no mechanism to update or replace it.
The official guidance provided by OpenAI support instructs users to delete their existing account entirely and create a new account using a different email and phone number. This procedure generates significant issues:
- Complete loss of data tied to the original account.
- Disruption of active subscriptions or ongoing services.
- Increased risk that the original number could later be reassigned to another person, potentially causing issues when they attempt account creation or verification.
Beyond the practical difficulties, this policy raises serious concerns regarding compliance with the General Data Protection Regulation (GDPR) and other relevant European legislation:
- Right to Rectification (Article 16 GDPR): Users must have the ability to correct inaccurate or outdated personal data.
- Right of Access (Article 15 GDPR): Users must have effective access to their data and the ability to manage it adequately.
- Right to Data Portability and Erasure: These rights become effectively meaningless if users must delete an entire account to correct a single piece of information.
Moreover, the stated justification—anti-fraud measures—does not sufficiently explain the absence of a controlled and secure mechanism for updating phone numbers. Secure alternatives (two-factor verification, identity checks, or waiting periods) could easily mitigate these risks.
OpenAI must urgently reconsider its current policy, not only to ensure compliance with GDPR and European regulations but, more importantly, to satisfy user needs.