Substack's privacy policy now discloses that the company shares account identifiers with child safety industry consortia to detect child sexual abuse material (CSAM). This is a new transparency disclosure added on May 6, 2026, informing users that their account information may be shared with industry organizations working to identify and report CSAM.
Substack has added a disclosure stating that account identifiers are shared with child safety industry consortia to detect child sexual abuse material. This transparency notice informs users of a data-sharing practice related to safety and legal compliance. The disclosure itself does not change the underlying data-sharing practice but makes it explicit in the privacy policy.
This disclosure makes explicit a data-sharing practice related to child safety and legal compliance. Transparency about how user data is used for safety purposes is important for user trust and regulatory compliance under laws like COPPA.
Substack now explicitly discloses that account identifiers are shared with child safety industry consortia to detect and report CSAM.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Substack added a disclosure that account identifiers are shared with child safety consortia for CSAM detection. This is a transparency update, not a substantive change to data handling. The disclosure aligns with regulatory expectations under COPPA (which governs child safety online) and general FTC guidance on material changes to privacy practices. No new substantive obligations appear to be created by this disclosure alone; rather, it documents an existing practice.
COPPA (Children's Online Privacy Protection Act), FTC Act Section 5 (unfair or deceptive practices)
Full compliance analysis
Obligation analysis, escalation trigger, board language, and recommended action.
Watcher: regulatory citations + obligations. Professional: full compliance memo.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-001699.
See the full side-by-side comparison of every sentence added, removed, and modified.
🔒 Full diff — WatcherSubstack added one navigation link to its site architecture on May 6, 2026: a new 'For media founders' option in …
Substack updated its privacy policy on May 5, 2026 to disclose that it shares account identifiers with child safety organizations …
Get alerted when this policy changes again — including what changed and why it matters.
Prefer a weekly summary instead?
Get the biggest policy changes across 320+ platforms every Sunday.