ElevenLabs updated its privacy policy on May 21, 2026, making several modifications to how it describes legal bases for data processing and contact procedures for exercising data rights. The policy now references multiple legal bases for processing (contract performance, legal compliance, legitimate interests) instead of relying primarily on consent, and reorganized contact instructions to designate a Data Protection Office with specific email and mailing address. The policy also added Brazil-specific contact information naming Paulo Eduardo Lilia as the Data Protection Officer for Brazilian residents. These changes clarify ElevenLabs' organizational structure, formalize data protection contacts, and broaden the stated legal justifications for data processing.
The updated policy clarifies that ElevenLabs may process your personal data based on multiple legal grounds: contract performance, legal compliance, legitimate interests, and other applicable legal bases, rather than relying primarily on your consent. The policy also reorganizes contact procedures for exercising data rights, designating a formal Data Protection Office accessible by email at legal@elevenlabs.io and by mail at the stated address. For Brazilian residents, the policy names Paulo Eduardo Lilia as the designated Data Protection Officer. You can exercise data rights using the online form or by emailing the Data Protection Office with your request in the subject line.
→ Review the updated policy to understand the legal bases under which ElevenLabs processes your data.
→ If you wish to exercise your data rights (access, deletion, portability, or objection), submit a request via the online form or email legal@elevenlabs.io using the designated subject line format.
Policy now cites contract performance, legal compliance, and legitimate interests as bases for processing, replacing reliance on consent as primary justification.
Formalized contact mechanism through named Data Protection Office at legal@elevenlabs.io and physical mailing address for submitting data rights requests.
Added designation of Paulo Eduardo Lilia as DPO for Brazilian residents, signaling localized compliance governance.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Wording edits to this record that do not change what it claims. Changes to a claim are published as corrections.
The policy revision clarifies ElevenLabs' legal bases for data processing and formalizes its data protection governance structure by establishing a named Data Protection Office. The change expands stated legal grounds for processing from consent-based framing …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-002227.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the …
TikTok's data collection extends to device sensors, clipboard content, geolocation, and cross-site tracking. Here is what their Privacy Pol…
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.