Turning Off Sensitive Data Protection
Thursday, September 24, 2026
What it is
<p>You can now turn off Sensitive Data Protection in your account through a self-serve wizard, including accounts with highly sensitive properties or HIPAA settings configured.</p>
Why it matters
<p>Once enabled, Sensitive Data Protection could not be turned off even when compliance requirements changed. You can now deactivate it without involving engineering.</p>
The Take
At UNBOUND, Kyle's session on optimizing an existing portal landed on one piece of advice about sensitive data protection: do not turn it on unless you actually need it, and look into what it does first, because unlike most settings in HubSpot, this one has not been easy to walk back.
That advice was not hypothetical. A host has a client who turned it on without needing it, and it is now getting in the way of the AI tools they are trying to use. The specific breakage worth knowing: the AI summary tile on a contact or deal record does not work in a HIPAA-enabled portal, but Breeze Assistant will still summarize the same record if you ask it directly. That is a distinction a HubSpot user has no reason to know on their own, so if this is on in your portal, expect to explain it. Previously, reversing this setting meant going through support; this self-service wizard replaces that.
Watch Us Discuss This
The full segment from the show, us working through this update start to finish.
FAQ
Does this touch my portal?
Only if sensitive data protection is enabled on your account, including highly sensitive properties or HIPAA settings.
How do I get it?
A self-service wizard in your account settings now lets you turn the protection off yourself, no support ticket required.
What do I do?
If it's on and you don't actually need it, know that it's quietly blocking some AI tooling, like the AI summary tile on records, before you decide whether to keep it. If you don't need it, follow Kyle's advice: leave it alone unless you know why it's there.
Produced by Value-First Media