OpenAI alleges that a former employee took more than 100 confidential files related to an unreleased OpenAI device and presented the information to Apple leadership, according to an October 14 Reuters report. 

The company alleges that the employee, who previously worked for Apple, sent the files to personal accounts on June 2, 2026, his final day at OpenAI after six months with the company, and later presented OpenAI’s product plans to senior Apple leaders, including a vice president of operations in Asia. 

OpenAI said the files included engineering and manufacturing data, supplier information, product images and project documents. 

Apple disputed the allegations, telling Reuters that it had found no evidence supporting OpenAI’s claims and that it has procedures to prevent new employees from using confidential information belonging to former employers.

The allegations emerged in an ongoing lawsuit between the two companies over claims of trade-secret theft.

Employee Access Creates Data Governance Risks

The dispute highlights a persistent challenge for enterprises: protecting sensitive information when employees can access, copy and transfer files beyond company-controlled systems.

For chief data officers (CDOs), the case illustrates why data governance must extend to the entire data lifecycle, including employee access, transfers to personal accounts and the revocation of permissions when staff leave.

Organizations need to know which employees can access sensitive data, what they are permitted to do with it and whether unusual transfers are detected. These controls become particularly important for product-development information, intellectual property and confidential research that could provide competitors with a commercial advantage.

Offboarding Controls Need to Match Data Sensitivity

The allegations also raise questions about how organizations manage access during employee departures. Removing account access is only one part of the process. Companies must also consider whether sensitive files have been copied, downloaded or transferred to locations outside their control.

For CDOs, that means working alongside security, legal and human resources teams to establish consistent rules for classifying confidential information, monitoring data movement and reviewing access before employees depart.

The dispute demonstrates the potential consequences of gaps in enterprise data controls and the difficulty of resolving disputes over confidential information once files leave an organization’s systems.