CA-C-000627
SoFi — SoFi Privacy Notice
Entity
Date detected
April 23, 2026
Effective date
April 23, 2026
Severity
Medium
Direction
Negative
Affected users
all users us users
Taxonomy
Consent expansion
Changes
+3 sentences added · −3 sentences removed · 13 sentences modified
Share 𝕏 Share in Share 🔒 PDF
🔔 Get alerted when SoFi changes their policies.
Watcher — $9.99/mo Professional →

What Changed

SoFi updated its Privacy Notice on April 23, 2026, changing how it describes its use of tracking technologies. The policy now explicitly states that pixels and other tracking tools are used to collect your information and actions, and that this data is shared with social media, advertising, and analytics partners. The updated wording also clarifies that by not making a choice, you are agreeing to the use of these technologies — which is a meaningful shift from the previous opt-out framing.

Consumer Impact (what this means for users)

SoFi's updated privacy notice now explicitly states that pixels and tracking technologies are used to collect your actions on their site and that this data is shared with social media, advertising, and analytics partners. Crucially, the new language states that if you do not make a selection, you are agreeing to the use of these technologies — meaning inaction now implies consent. You can opt out by visiting SoFi's Privacy Preference Center and toggling off non-essential cookie and tracking categories.

Obligation Changes (what shifted)

1
New obligations
2
Expanded
Consumers Added

If you visit SoFi's site and don't change your cookie settings, you are automatically agreeing to being tracked and having your data shared with advertisers.

Consumers Expanded

SoFi is now openly stating it uses pixels (not just cookies) to track what you do on their site.

+ 1 more obligation changes. Full breakdown available with Watcher.

Unlock — $9.99/mo →

Applicable regulations

CCPA/CPRA
California, USA
CFAA
United States Federal
CAN-SPAM
United States Federal
FCRA
United States Federal
GLBA
United States Federal
TCPA
United States Federal

Why It Matters (compliance & risk perspective)

SoFi's new default means your browsing and interaction data is shared with advertisers and social media companies unless you actively opt out. As a financial services platform, this tracking occurs in a context where sensitive financial behavior is observable.

📈 Historical Context

This is the 2nd significant Consent Expansion change SoFi has made since ConductAtlas began monitoring.

ConductAtlas has recorded 2 material changes to this document (since April 2026).

Key Clauses Affected

Silence-as-Consent Default

New language states that failing to make a selection constitutes agreement to tracking and data sharing with advertising and social media partners.

Pixel and Tracking Technology Disclosure

Policy now explicitly names pixels and other tracking technologies as tools used to collect user information and actions, beyond just cookies.

Third-Party Data Sharing Disclosure

Policy now explicitly states that tracked data is shared with social media, advertising, and analytics partners.

Full clause-by-clause analysis available with Watcher.

Evidence Verification

✓ Verified
Previous Version
3dfa2aeb56d30d09c89593ed147e0be052f4572888a8c1afe658dcc7bb6c40b1
April 21, 2026 11:16 UTC
✓ Verified
Current Version
4bed41478c530e57d0f52b4972f7f1dbcb02eaf9c599930a163b4bc5ac21d483
April 23, 2026 06:09 UTC
✓ Verified
Change Detected
April 23, 2026 06:09 UTC
✓ Verified
Source Document
https://www.sofi.com/privacy-policy/
How to Cite
ConductAtlas Policy Archive
Entity: SoFi | Document: SoFi Privacy Notice | Record: CA-C-000627
Captured: 2026-04-23 06:09:57 UTC
URL: https://conductatlas.com/change/2026-04-23-sofi-sofi-privacy-notice-627/
Accessed: May 2, 2026

Unlock the full analysis

Institutional analysis Clause breakdown Document redline Citation export
Watcher — $9.99/mo Professional — $149/mo

14-day free trial available.

Institutional Analysis (Compliance & legal intelligence)

Assessment

SoFi revised its cookie/tracking consent interface on April 23, 2026 to explicitly name pixel-based tracking and data sharing with advertising and social media partners, and introduced a 'silence equals consent' default. This touches GDPR Art. 4(11) and Art. 7 (valid consent must be freely given, specific, informed, and unambiguous — pre-ticked boxes or inaction do not satisfy this standard), CCPA/CPRA Cal. Civ. Code §1798.120 (right to opt out of sale/sharing), and FTC Act Section 5 (deceptive practices). The silence-as-consent framing is a known regulatory pressure point in both EU and California enforcement. Compliance teams should assess whether the consent mechanism meets applicable standards and whether the vendor list for pixel/tracking partners is current and documented.

Regulatory Exposure

1. GDPR Art. 4(11) & Art. 7 — Valid consent requires a clear affirmative act; silence, pre-ticked boxes, or inactivity do not constitute consent (confirmed in CJEU Planet49 ruling, C-673/17). The 'if you do not make a selection, you agree' language is directly contrary to this standard for EU-accessible services.

🔒

Compliance intelligence locked

Obligation analysis, escalation trigger, board language, and recommended action.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations + obligations. Professional: full compliance memo.

ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-000627.

Full Changes

See the full side-by-side comparison of every sentence added, removed, and modified.

🔒 Unlock full diff — Watcher $9.99/mo

Document Context

Document
SoFi Privacy Notice
Entity
SoFi
Captured
April 23, 2026
Source URL
https://www.sofi.com/privacy-policy/
More from SoFi
May 1, 2026 Medium
SoFi Terms of Service

SoFi updated its Terms of Service on May 1, 2026 to consolidate language about the E-Sign Agreement into a single, …

May 1, 2026 Low
SoFi Privacy Notice

SoFi made minor formatting and navigational updates to their Privacy Notice on May 1, 2026. Changes include removing an accessibility …

May 1, 2026 Medium
SoFi Terms of Service

SoFi updated their Terms of Service on May 1, 2026, replacing a ClassPass free trial benefit for SoFi Plus members …

Stay ahead of policy changes

We monitor 200+ platforms and archive every change — verified and timestamped.