{"id":34596,"date":"2026-04-28T10:57:30","date_gmt":"2026-04-28T08:57:30","guid":{"rendered":"https:\/\/www.xalt.de\/?p=34596"},"modified":"2026-04-28T10:57:31","modified_gmt":"2026-04-28T08:57:31","slug":"atlassian-aendert-datennutzung-fuer-ki","status":"publish","type":"post","link":"https:\/\/www.xalt.de\/en\/atlassian-aendert-datennutzung-fuer-ki\/","title":{"rendered":"Atlassian changes data contribution for AI from August 17, 2026: What you need to check now as an admin - incl. checklist"},"content":{"rendered":"<div style=\"display: flex; align-items: center; gap: 12px; margin: 40px 0;\">\n  <img decoding=\"async\" \n    src=\"https:\/\/www.xalt.de\/wp-content\/uploads\/2026\/04\/marcel-waenke-scaled.jpg\" \n    alt=\"Marcel W\u00e4nke\"\n    style=\"width: 50px; height: 50px; border-radius: 50%; object-fit: cover;\"\n  \/>\n  <div>\n    <p style=\"margin: 0; font-weight: bold;\">Author: Marcel W\u00e4nke<\/p>\n    <p style=\"margin: 0; font-weight: bold;\">Senior Atlassian AI Consultant at XALT<\/p>\n  <\/div>\n<\/div>\n\n\n\n<p>Atlassian is consistently expanding AI experiences such as Rovo. For AI to really help in everyday life, it needs context - and context comes from patterns in usage. This is precisely why Atlassian is updating its data usage guidelines and introducing new, centralized settings for <strong>data contribution.<\/strong> ein.<\/p>\n\n\n\n<p class=\"translation-block\">Important for you as an Atlassian Admin: This is not a \"sudden siphoning\" of data, but a clearly announced step with advance notice, protective mechanisms, and \u2013 depending on the plan \u2013 configuration options up to an <strong>Opt-out<\/strong>. Your task now is to steer the topic toward compliance early on, understand the defaults, and properly prepare your organization for the deadline on <strong>August 17, 2026<\/strong>.<\/p>\n\n\n\n<p>In this article, you will find the classification plus a concrete checklist of what you should do by fall 2026.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"Die-Atlassian-Timeline-f\u00fcr-die-Anpassung-deiner-Einstellungen\">The Atlassian timeline for customizing your settings<\/h2>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><a href=\"https:\/\/www.xalt.de\/wp-content\/uploads\/2026\/04\/XALT-Atlassian-Datennutzung-fur-KI-Timeline-EN-scaled.png\"><img fetchpriority=\"high\" decoding=\"async\" width=\"2560\" height=\"705\" src=\"https:\/\/www.xalt.de\/wp-content\/uploads\/2026\/04\/XALT-Atlassian-Datennutzung-fur-KI-Timeline-EN-scaled.png\" alt=\"\" class=\"wp-image-34600\" srcset=\"https:\/\/www.xalt.de\/wp-content\/uploads\/2026\/04\/XALT-Atlassian-Datennutzung-fur-KI-Timeline-EN-scaled.png 2560w, https:\/\/www.xalt.de\/wp-content\/uploads\/2026\/04\/XALT-Atlassian-Datennutzung-fur-KI-Timeline-EN-1536x418.png 1536w, https:\/\/www.xalt.de\/wp-content\/uploads\/2026\/04\/XALT-Atlassian-Datennutzung-fur-KI-Timeline-EN-2048x558.png 2048w, https:\/\/www.xalt.de\/wp-content\/uploads\/2026\/04\/XALT-Atlassian-Datennutzung-fur-KI-Timeline-EN-18x5.png 18w\" sizes=\"(max-width: 2560px) 100vw, 2560px\" \/><\/a><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"Was-du-vermeiden-solltest\">What you should avoid<\/h2>\n\n\n\n<p>In practice, the issue rarely fails because of technology - but because of governance and timing:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\"><strong>\"We'll look into it later\"<\/strong>: The changes take effect on <strong>08\/17\/2026<\/strong>. Those who wait until just before to review often fail to achieve clean stakeholder alignment (Compliance\/Data Privacy\/Security).<\/li>\n\n\n\n<li class=\"translation-block\"><strong>Misunderstanding about responsibility<\/strong>: According to Atlassian's DPA, your <strong>product settings<\/strong> are considered legally binding, \"documented instructions\" to Atlassian. This means Atlassian does not decide for you \u2013 but you must actively decide what should be permitted in your setup.<\/li>\n\n\n\n<li class=\"translation-block\"><strong>Unclear data terminology<\/strong>: Metadata, in-app data, de-identified, aggregated \u2013 many discussions go in circles because terms are not properly separated.<\/li>\n\n\n\n<li class=\"translation-block\"><strong>Plan\/Trial traps<\/strong>: Defaults depend on the <strong>Highest Active Plan<\/strong> \u2013 including trial versions. This means a trial can shift defaults without everyone being aware of it.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"Der-richtige-Ansatz:-Ein-zweigleisiges-Vorgehen\">Recommandation: Take a two-track approach<\/h2>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li class=\"translation-block\"><strong>Governance first<\/strong> (clarify internally what is permitted): Which data may contribute (de-identified and aggregated) to product improvement \u2013 and which may not?<\/li>\n\n\n\n<li class=\"translation-block\"><strong>Technical implementation second<\/strong> (applying settings exactly): Check and document your configuration in <strong>Atlassian Administration &gt; Security &gt; Data contribution<\/strong>, and only apply it finally after approval.<\/li>\n<\/ol>\n\n\n\n<p><\/p>\n\n\n\n<p>So you remain capable of acting: You support AI innovations where they make sense and are compliant for you - and switch off where your requirements demand it.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"Deine-Checkliste:-6-konkrete-Schritte\">Your checklist: 6 concrete steps<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"Schritt-1:-Timeline-&amp;-Zeitfenster-richtig-nutzen\">Step 1: Use timeline &amp; time slots correctly<\/h3>\n\n\n\n<p><a href=\"https:\/\/www.atlassian.com\/trust\/ai\/data-contribution?utm_source=sfmc&amp;utm_medium=email&amp;utm_campaign=ACM-11618&amp;jobid=107996203&amp;subid=157395364\" target=\"_blank\" rel=\"noopener\">Atlassian communicates the changeover with a clear roadmap<\/a>:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>April 16, 2026<\/strong>: Rollout of the data contribution settings begins (step by step).<\/li>\n\n\n\n<li><strong>May 19, 2026<\/strong>: Rollout completed, settings fully available.<\/li>\n\n\n\n<li><strong>August 17, 2026<\/strong>: Changes take effect (according to your selection).<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<p class=\"translation-block\">Important to note in parallel: The framework (DPA) has already been effective since <strong>October 2024<\/strong> and describes the framework in which Atlassian acts as the Processor and you decide as the Controller.<\/p>\n\n\n\n<p class=\"translation-block\"><strong>Governance Note:<\/strong> The DPA also anchors a <strong>72-hour standard<\/strong> for \"Security Incidents\": Atlassian informs the customer without undue delay and \u2013 where possible \u2013 at the latest <strong>within 72 hours<\/strong> after Atlassian becomes aware of an incident. This is a good trigger to go through your internal incident response processes (Security\/DPO\/Legal) once: Who receives the notification, who evaluates it, who escalates it \u2013 and what evidence do you need for an audit?<\/p>\n\n\n\n<p class=\"translation-block\"><strong>Practical Tip:<\/strong> It is also important to note: The framework (DPA) has already been effective since <strong>October 2024<\/strong> and describes the framework in which Atlassian acts as the Processor and you decide as the Controller. Plan for <strong>at least 4\u20136 weeks<\/strong> internally to finalize coordination with Compliance\/Data Protection \u2013 especially if multiple products\/orgs\/connectors are affected.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"Schritt-2:-Trenne-Metadaten-vs.-In\u2011App\u2011Daten-f\u00fcr-die-Risikoabsch\u00e4tzung\">Step 2: Separate metadata vs. in-app data for risk assessment<\/h3>\n\n\n\n<p>For a reliable risk assessment, you must separate:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Metadata<\/strong>: Content attributes (e.g. readability values, story points, end dates) + 'common patterns'. Atlassian focuses on high-frequency patterns and leaves out unique\/rare information.<\/li>\n\n\n\n<li><strong>In-app data<\/strong>: Real content such as page titles, Jira descriptions, comments.<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<p class=\"translation-block\">Important to note: Before use, data is <strong>de-identified<\/strong> and <strong>aggregated at the customer level<\/strong> so that it can no longer be assigned to individual users. Additionally, Atlassian can retain this de-identified, aggregated data for up to <strong>seven years<\/strong> to monitor trends and improve models.<\/p>\n\n\n\n<p class=\"translation-block\"><strong>Important governance argument from the statement:<\/strong> Atlassian commits itself technically and politically to <strong>\"Un-learning\"<\/strong>:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\">If you opt out or delete an app, Atlassian commits to <strong>retraining<\/strong> models that were trained on this data.<\/li>\n\n\n\n<li class=\"translation-block\">Removal from training sets: <strong>In-app data within 30 days<\/strong>, content attributes within <strong>90 days<\/strong>.<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<p>This is a key point for many compliance discussions because it goes beyond 'from now on no more' and also addresses 'training data already in use'.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p class=\"translation-block\"><strong>Practical Tip:<\/strong> For Security\/Compliance, it makes sense not to make a blanket assessment (\"AI = no\"), but a <strong>data-type-based<\/strong> one: metadata and content are viewed with different levels of criticality in many companies.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"Schritt-3:-Pr\u00fcfe-deine-Defaults-\u2013-sie-h\u00e4ngen-an-deinem-Plan-(inkl.-Trials)\">Step 3: Check your defaults - they depend on your plan (incl. trials)<\/h3>\n\n\n\n<p>A frequent 'aha' moment: Data protection defaults are linked to the subscription model. Atlassian handles it as follows:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th class=\"has-text-align-left\" data-align=\"left\">Plan<\/th><th class=\"has-text-align-left\" data-align=\"left\">Metadata<\/th><th class=\"has-text-align-left\" data-align=\"left\">In-app data<\/th><th class=\"has-text-align-left\" data-align=\"left\">Control options<\/th><\/tr><tr><td class=\"has-text-align-left\" data-align=\"left\"><strong>Free\/Standard<\/strong><\/td><td class=\"has-text-align-left\" data-align=\"left\">Always shared<\/td><td class=\"has-text-align-left\" data-align=\"left\">On (standard)<\/td><td class=\"has-text-align-left translation-block\" data-align=\"left\">In-app data can be <strong>disabled<\/strong>. Metadata cannot be changed.<\/td><\/tr><tr><td class=\"has-text-align-left\" data-align=\"left\"><strong>Premium<\/strong><\/td><td class=\"has-text-align-left\" data-align=\"left\">Always shared<\/td><td class=\"has-text-align-left\" data-align=\"left\">Off (default)<\/td><td class=\"has-text-align-left translation-block\" data-align=\"left\">In-app data can be <strong>enabled<\/strong>. Metadata cannot be changed.<\/td><\/tr><tr><td class=\"has-text-align-left\" data-align=\"left\"><strong>Enterprise<\/strong><\/td><td class=\"has-text-align-left\" data-align=\"left\">On (standard)<\/td><td class=\"has-text-align-left\" data-align=\"left\">Off (default)<\/td><td class=\"has-text-align-left translation-block\" data-align=\"left\"><strong>Both<\/strong> settings can be enabled and disabled.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>Nuances that hurt in everyday life:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Trials count<\/strong>: A premium trial can change defaults.<\/li>\n\n\n\n<li><strong>Downgrade from Enterprise<\/strong>: You lose metadata control; Atlassian gives you a <strong>30-day review phase<\/strong>, before metadata is automatically activated.<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<p class=\"translation-block\"><strong>Practical Tip:<\/strong> Record plan\/trial events in your admin change log, as they indirectly influence \"privacy defaults.\"<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"Schritt-4:-Nutze-die-30\u2011Tage-\u201eGrace-Period\u201c-f\u00fcr-neue-Apps\">Step 4: Use the 30-day 'grace period' for new apps<\/h3>\n\n\n\n<p class=\"translation-block\">When a <strong>new app<\/strong> is added to the organization, Atlassian provides a <strong>30-day grace period<\/strong> before metadata or in-app data from that app are included in usage. This is your window for a mini-PIA (Privacy Impact Assessment) and settings adjustments.<\/p>\n\n\n\n<p class=\"translation-block\"><strong>Space Exception:<\/strong> This grace period does <strong>not<\/strong> apply to new spaces\/projects within an app that is already contributing. Example: If Confluence is already set to Contribution, a newly created space contributes immediately.<\/p>\n\n\n\n<p class=\"translation-block\"><strong>Practical Tip:<\/strong> If you frequently create new spaces\/projects (e.g., per team\/program), you need clear guardrails (naming, space templates, classification, possibly excludes), not just a one-time setting decision.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"Schritt-5:-Informiere-deinen-Compliance-Beauftragten-bevor-du-klickst\">Step 5: Inform your compliance officer before you click<\/h3>\n\n\n\n<p>From an admin perspective, this is the 'compliance-safe move':<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\">You <strong>proactively<\/strong> inform the body responsible for data protection (Compliance\/DPO) about the planned data usage and the available configuration options.<\/li>\n\n\n\n<li class=\"translation-block\">You finalize the opt-in\/opt-out only after <strong>explicit instruction\/approval<\/strong>.<\/li>\n\n\n\n<li class=\"translation-block\">Additionally important (and often forgotten): If you have \"Authorized Affiliates\" (subsidiaries\/partners running under your org), you, as the primary contracting party, are the <strong>central coordination point<\/strong>. Your org setting therefore also binds their data.<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<p class=\"translation-block\"><strong>Practical Tip:<\/strong> Build a communication matrix: <em>Who needs to be informed (Compliance, Legal, Security, Data Owners, Affiliates)?<\/em> and <em>who gives final approval?<\/em><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"Schritt-6:-Setze-Data-Contribution-technisch-um-(und-denke-an-Scope-Ausnahmen)\">Step 6: Implement data contribution technically (and think about scope exceptions)<\/h3>\n\n\n\n<p>Depending on the plan, you can deactivate metadata and\/or in-app data or exclude certain apps\/spaces\/teamwork graph connectors.<\/p>\n\n\n\n<p>Practical example:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Confluence contains a lot of sensitive content \u2192 you define stricter rules for in-app data.<\/li>\n\n\n\n<li>Jira projects tend to contain structured tickets \u2192 you allow metadata contribution (or vice versa, depending on the policy).<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>Practical tip:<\/strong> Treat this configuration as a security-relevant change:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Change ticket<\/li>\n\n\n\n<li>Four-eyes principle (admin + compliance)<\/li>\n\n\n\n<li>Documentation in the admin manual<\/li>\n\n\n\n<li>Review date (e.g. annually or when changing plans)<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe title=\"How to manage data contribution settings | Atlassian\" width=\"800\" height=\"450\" src=\"https:\/\/www.youtube.com\/embed\/-EJF6iQe4Dw?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"Zusammenfassung\">Summary<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\"><strong>Save the date:<\/strong> On <strong>August 17, 2026<\/strong>, Atlassian's data practices for AI\/apps will change \u2013 with a prior rollout of settings starting in April\/May 2026.<\/li>\n\n\n\n<li class=\"translation-block\"><strong>Your settings are legally relevant:<\/strong> Your product configuration is (in the sense of DPA logic) your \"documented instruction\" \u2013 you must actively manage it.<\/li>\n\n\n\n<li class=\"translation-block\"><strong>Metadata \u2260 In-app data:<\/strong> Only those who separate the data types can perform a reliable risk assessment.<\/li>\n\n\n\n<li class=\"translation-block\"><strong>Defaults depend on the plan (including trials):<\/strong> The Highest Active Plan determines what is active by default and what you can modify.<\/li>\n\n\n\n<li class=\"translation-block\"><strong>Best practice:<\/strong> First stakeholder alignment (compliance), then technical implementation including documentation and review.<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<p class=\"translation-block\">If you need support in properly setting up your data contribution decision (stakeholder alignment, documentation, technical implementation, connector\/scope design): <strong>XALT<\/strong> supports you from assessment to implementation in a pragmatic and compliant manner.<\/p>\n\n\n\n<div class=\"wp-block-buttons is-content-justification-center is-layout-flex wp-container-core-buttons-is-layout-a89b3969 wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link has-black-color has-text-color has-background has-link-color has-text-align-center wp-element-button\" href=\"https:\/\/www.xalt.de\/en\/contact-2\/\" style=\"background-color:#01ffcd\">Your contact to XALT<\/a><\/div>\n<\/div>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>Atlassian is also offering a live webinar on April 28 and 29<\/strong>. Among other things, it deals with the scope of the changes, protection mechanisms (e.g. de-identification &amp; aggregation) and the practical configuration of the data contribution settings in the Atlassian administration - including Q&amp;A with Atlassian experts.<\/p>\n\n\n\n<div class=\"wp-block-buttons is-content-justification-center is-layout-flex wp-container-core-buttons-is-layout-a89b3969 wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link has-black-color has-text-color has-background has-link-color has-text-align-center wp-element-button\" href=\"https:\/\/www.atlassian.com\/webinars\/enterprise-cloud\/data-contribution\" style=\"background-color:#01ffcd\" target=\"_blank\" rel=\"noopener\">Register now for the webinar<\/a><\/div>\n<\/div>\n\n\n\n<p><\/p>","protected":false},"excerpt":{"rendered":"<p>Autor: Marcel W\u00e4nke Senior Atlassian AI Consultant bei XALT Atlassian baut KI-Erlebnisse wie Rovo konsequent aus. Damit KI im Alltag wirklich hilft, braucht sie Kontext \u2013 und Kontext entsteht aus Mustern in der Nutzung. Genau deshalb aktualisiert Atlassian seine Richtlinien zur Datennutzung und f\u00fchrt neue, zentrale Einstellungen f\u00fcr Data Contribution ein. Wichtig f\u00fcr dich als [&hellip;]<\/p>\n","protected":false},"author":203,"featured_media":34602,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"categories":[37],"tags":[42],"department":[],"job_location":[],"start":[349],"beschaeftigungsverhaeltnis":[373],"class_list":["post-34596","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-atlassian","tag-cloud","start-ab-sofort","beschaeftigungsverhaeltnis-vollzeit"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.xalt.de\/en\/wp-json\/wp\/v2\/posts\/34596","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xalt.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xalt.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xalt.de\/en\/wp-json\/wp\/v2\/users\/203"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xalt.de\/en\/wp-json\/wp\/v2\/comments?post=34596"}],"version-history":[{"count":16,"href":"https:\/\/www.xalt.de\/en\/wp-json\/wp\/v2\/posts\/34596\/revisions"}],"predecessor-version":[{"id":34620,"href":"https:\/\/www.xalt.de\/en\/wp-json\/wp\/v2\/posts\/34596\/revisions\/34620"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.xalt.de\/en\/wp-json\/wp\/v2\/media\/34602"}],"wp:attachment":[{"href":"https:\/\/www.xalt.de\/en\/wp-json\/wp\/v2\/media?parent=34596"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xalt.de\/en\/wp-json\/wp\/v2\/categories?post=34596"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xalt.de\/en\/wp-json\/wp\/v2\/tags?post=34596"},{"taxonomy":"department","embeddable":true,"href":"https:\/\/www.xalt.de\/en\/wp-json\/wp\/v2\/department?post=34596"},{"taxonomy":"job_location","embeddable":true,"href":"https:\/\/www.xalt.de\/en\/wp-json\/wp\/v2\/job_location?post=34596"},{"taxonomy":"start","embeddable":true,"href":"https:\/\/www.xalt.de\/en\/wp-json\/wp\/v2\/start?post=34596"},{"taxonomy":"beschaeftigungsverhaeltnis","embeddable":true,"href":"https:\/\/www.xalt.de\/en\/wp-json\/wp\/v2\/beschaeftigungsverhaeltnis?post=34596"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}