Netflix updated its Privacy Statement on April 19, 2026, adding a new dedicated section called 'Supplemental Privacy Disclosures for US Residents' that includes detailed information about data collection, use, categories of personal information sold or shared, and privacy rights for people in the United States. Previously, supplemental disclosures only covered certain services like Netflix Games; now the document also addresses specific regional requirements, particularly for US residents. This matters because it reflects Netflix's effort to comply with state-level US privacy laws and gives American users clearer, more detailed information about how their data is handled.
Netflix is now explicitly disclosing categories of personal information it sells or shares and providing US residents with formal privacy rights and an appeals process, reflecting compliance with CCPA/CPRA and other US state privacy laws. This gives US users more transparency and enforceable rights over their personal data than the previous policy provided.
Netflix has added a dedicated 'Supplemental Privacy Disclosures for US Residents' section that now explicitly discloses what categories of personal information are sold or shared, the business purposes for doing so, how long data is retained, and how US residents can exercise and appeal privacy rights. This gives American users — particularly those in states with active privacy laws — a clearer picture of their data rights and Netflix's data practices than before. You can review your rights and opt-out options by visiting netflix.com/privacy#states or scrolling to the new US Residents section in Netflix's Privacy Statement.
Netflix has materially expanded its privacy policy on April 19, 2026 by adding a 'Supplemental Privacy Disclosures for US Residents' section that includes a Notice at Collection, categories of personal information sold or shared, business purposes for selling/sharing, retention details, use of de-identified information, privacy rights, appeals process, and notice of financial incentives. This directly implicates multi-state US privacy law compliance (CCPA/CPRA, and emerging state laws in Virginia, Colorado, Connecticut, Texas, etc.). Any organization with Netflix in its vendor stack that processes personal data jointly with Netflix, or that relies on Netflix's disclosures to satisfy its own obligations, should assess whether its own privacy notices remain accurate. Action is warranted for DPOs and privacy counsel to review the downstream implications.
1. California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA): Cal. Civ. Code §1798.100 (right to know), §1798.110 (categories of personal information collected), §1798.115 (categories sold or shared), §1798.120 (right to opt-out of sale/sharing), §1798.121 (sensitive personal information), §1798.130 (Notice at Collection requirements), §1798.135 (opt-out methods), §1798.145 (exemptions), §1798.185 (CPPA rulemaking). The new 'Notice at Collection' and 'Categories of Personal Information Sold or Shared' sub-sections directly respond to these requirements.
Compliance intelligence locked
Obligation analysis, escalation trigger, board language, and recommended action.
Watcher: regulatory citations + obligations. Professional: full compliance memo.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-000511.
ConductAtlas Policy Archive Entity: Netflix | Document: Netflix Privacy Statement | Record: CA-C-000511 Captured: 2026-04-19 06:03:51 UTC URL: https://conductatlas.com/change/2026-04-19-netflix-netflix-privacy-statement-511/ Accessed: April 21, 2026
Netflix updated its Terms of Use on April 19, 2026, making several notable changes. Most significantly, Netflix now requires users …
Subscribe to Watcher for $9.99/mo to get email alerts the moment Netflix updates their policies. Or try Professional free for 14 days.