Salesforce Slack Data Retention: Employer Access to Private Channel Messages

Many employees were surprised to learn that Salesforce's Slack messaging platform retains all messages, including those in private channels and direct messages, and that employers with Enterprise plans can export the complete message history. Slack's data retention policies mean that "private" channels are private from other employees but fully accessible to workspace administrators. Employers using Slack Enterprise Grid or Slack with Compliance features can export every message, file, and reaction from every channel including private ones and DMs. This capability is used for legal discovery, compliance monitoring, and in some cases, employee investigations. Workers who treated Slack DMs as private conversations discovered that their messages about job searching, salary discussions, personal matters, and workplace complaints were accessible to management. The disconnect between perceived privacy and actual data access created a false sense of security that led workers to share sensitive information through a monitored channel.

The ramifications of this incident extend beyond the immediate data exposure. Privacy regulators in multiple jurisdictions have opened investigations, and affected individuals are organizing collective action to demand accountability and meaningful remediation. The case highlights systemic weaknesses in how organizations handle personal data and the gap between corporate privacy promises and operational reality.

For impacted individuals, immediate action is critical. Filing a data subject access request forces the company to disclose exactly what data they hold about you, providing the foundation for deletion requests, regulatory complaints, and potential legal action. Below, we outline the specific data types at risk and the concrete steps you can take to protect yourself.