CA-C-001617
SoFi — SoFi Privacy Notice
Entity
Date detected
May 5, 2026
Effective date
May 5, 2026
Severity
Low
Direction
Positive
Affected users
all users
Taxonomy
Consent expansion
Changes
+4 sentences added · −3 sentences removed · 17 sentences modified
Share 𝕏 Share in Share 🔒 PDF
Watch SoFi Get alerts when this policy changes.
Watch — Free

Event Summary

SoFi updated its Privacy Notice on May 5, 2026 with primarily formatting and navigation changes to the publicly visible document structure. The substantive privacy-related language that appears in the diff shows a shift in how cookie and tracking technology disclosures are presented: the previous version stated SoFi uses pixels and tracking technologies and shares information with third-party partners, while the updated version introduces a 'Privacy Preference Center' framework that describes cookies and tracking as information collection methods and notes that users can choose not to allow some types of cookies. The practical effect is that cookie preference controls now appear to have an explicit opt-out mechanism rather than an opt-in default.

LOW

Consumer Impact

The updated Privacy Notice now establishes a Privacy Preference Center that allows users to decline certain types of cookies rather than requiring affirmative consent to proceed. Previously, the policy stated that failure to make a selection meant automatic agreement to use of tracking technologies; the revised language states users can choose not to allow some types of cookies. This creates an explicit opt-out mechanism for cookie preferences instead of an opt-in requirement.

Governance Analysis

The updated Privacy Notice removes reliance on silence-equals-agreement and establishes an explicit Privacy Preference Center, allowing users to decline cookies rather than requiring affirmative consent to proceed. This operationally changes the consent model from opt-in-by-default to opt-out, which aligns with regulatory frameworks like GDPR that expect transparent, user-controlled tracking and reduces potential enforcement risk around consent mechanics.

Available Actions

Review the Privacy Preference Center when visiting SoFi to select which cookie types to allow

If No Action Is Taken

If the Privacy Preference Center defaults to accepting all cookies, continued inaction will result in all cookie types being used as described in the notice

Users who do not interact with the preference controls will operate under whatever the default cookie configuration is, which should be clearly stated in the full notice text

Key Clauses Affected

Privacy Preference Center and cookie consent mechanism

Replaced deemed-consent model (silence equals agreement) with explicit opt-out controls allowing users to decline non-essential cookies

Full clause-by-clause analysis available with Professional.
These clauses may change again. Get alerted when they do. Watch SoFi — Free

This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology

Evidence Verification

✓ Verified
Previous Version
59a2df6847db27712dd7d8edd74abc8bdfd465685d0daca7ca215aae3af6846c
May 1, 2026 15:57 UTC
✓ Verified
Current Version
3989aee02516e87e4145a63e2011d1c84355e95632b7133a6c8c0fbbbe3f11e9
May 5, 2026 08:08 UTC
✓ Verified
Change Detected
May 5, 2026 08:08 UTC
Analysis Methodology
✓ Verified
Source Document
https://www.sofi.com/privacy-policy/
Citation Record
Entity: SoFi
Document: SoFi Privacy Notice
Record ID: CA-C-001617
Captured: 2026-05-05 08:08:54 UTC
URL: https://conductatlas.com/change/2026-05-05-sofi-sofi-privacy-notice-1617/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
For legal and compliance teams

Institutional Analysis

Assessment

SoFi revised its Privacy Notice to introduce a Privacy Preference Center and reframe cookie consent from opt-in-by-default (no selection = agreement) to opt-out (users can decline). This change aligns with GDPR and similar privacy frameworks that expect affirmative consent or easy opt-out for non-essential tracking. The change does not appear to create new compliance obligations but rather formalizes a control mechanism that regulatory scrutiny increasingly expects. No material new risk exposure is evident from the language provided, though the scope and granularity of cookie categories offered should be reviewed to ensure alignment with regulatory definitions of essential versus non-essential cookies.

Regulatory Exposure

GDPR (ePrivacy Directive Article 7, EDPB consent guidance), CCPA, COPPA, FTC Act Section 5 (unfair or deceptive practices)

Full compliance analysis

Obligation analysis, escalation trigger, board language, and recommended action.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations + obligations. Professional: full compliance memo.

ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-001617.

Full Changes

See the full side-by-side comparison of every sentence added, removed, and modified.

🔒 Full diff — Watcher

Document Context

Version history → Policy drift analysis → Document page →
Document
SoFi Privacy Notice
Entity
SoFi
Captured
May 5, 2026
Source URL
https://www.sofi.com/privacy-policy/
Other changes to SoFi Privacy Notice
Previous change May 1, 2026
SoFi's Privacy Notice website underwent formatting and navigation updates on May 1, 2026. The detected changes consist primarily of removal …
Low Neutral
Next change May 6, 2026
SoFi updated its Privacy Notice on May 6, 2026 to reorganize and clarify how it collects and shares tracking data. …
Medium Negative
View full version history →
More from SoFi
May 7, 2026 Medium
SoFi Privacy Notice

SoFi revised its cookie and tracking technology disclosure on May 7, 2026. The previous language stated that SoFi uses pixels …

May 6, 2026 Medium
SoFi Privacy Notice

SoFi updated its Privacy Notice on May 6, 2026 to reorganize and clarify how it collects and shares tracking data. …

May 5, 2026 Low
SoFi Terms of Service

SoFi updated its Terms of Service on May 5, 2026, making primarily formatting and navigation changes to the document structure. …

Track SoFi policy changes

Get alerted when this policy changes again — including what changed and why it matters.

Prefer a weekly summary instead?

Get the biggest policy changes across 320+ platforms every Sunday.