CA-C-002401
Coinbase β€” Coinbase Privacy Policy
Entity
Date detected
May 28, 2026
Severity
Changes
5 sentences modified
Share 𝕏 Share in Share 🔒 PDF
Watch Coinbase Get alerts when this policy changes.
Watch β€” Free

Event Summary

Coinbase updated their Coinbase Privacy Policy on May 28, 2026. Change detected: 5 sentence(s) modified. Document contained 229 sentences after update.

UNKNOWN

Consumer Impact

Impact assessment pending documentation review.

Governance Analysis

Institutional analysis pending. This change has been verified and documented.

These clauses may change again. Get alerted when they do. Watch Coinbase β€” Free

This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology

Evidence Verification

✓ Verified
Previous Version
df5f1aac36e507e2b54f7f627784ed657e1e68f545444ca61c3f7eaea81187bd
May 1, 2026 06:02 UTC
✓ Verified
Current Version
378e242ef7ef7357a0930156715c137fefbd818ce139f51127d06e5ba9cd315b
May 28, 2026 00:04 UTC
✓ Verified
Change Detected
May 28, 2026 00:04 UTC
Analysis Methodology
✓ Verified
Source Document
https://www.coinbase.com/legal/privacy
Citation Record
Entity: Coinbase
Document: Coinbase Privacy Policy
Record ID: CA-C-002401
Captured: 2026-05-28 00:04:38 UTC
URL: https://conductatlas.com/change/2026-05-28-coinbase-coinbase-privacy-policy-2401/
Accessed: May 31, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.

Clause-Level Changes

New Provisions Added
EU and UK User Rights (GDPR and UK GDPR)
Medium

Addition of explicit GDPR/UK GDPR rights provision demonstrates increased regulatory compliance transparency for EU and UK users, filling a gap that previously only mentioned California residents.

Full clause text available with Compliance. See Compliance β†’
Provisions Removed
Extensive KYC/Identity Data Collection
High

Removal of this standalone provision represents consolidation into 'Government ID and Biometric Data Collection,' removing specific examples like passport, driver's license, and tax ID that made the scope explicit.

Removed clause text available with Compliance. See Compliance β†’
Broad Third-Party Data Sharing Including Advertising and Analytics
High

Removal of explicit mention of advertising partners and targeted advertising, combined with downgrading severity from high to medium, suggests a de-emphasis of advertising-related data sharing in the updated policy.

Removed clause text available with Compliance. See Compliance β†’
Blockchain Analytics Data Sharing
High

Removal of this standalone provision consolidates blockchain analytics sharing into the broader third-party sharing provision, removing the explicit justifications about AML compliance and ecosystem integrity that were previously highlighted.

Removed clause text available with Compliance. See Compliance β†’
California Consumer Privacy Rights
Medium

Removal of California-specific CCPA provision represented by revised 'California Resident Rights (CCPA/CPRA)' with updated language that adds CPRA requirements, so this is a substantial revision rather than true removal.

Removed clause text available with Compliance. See Compliance β†’
Children's Data and COPPA Compliance
Low

Complete removal of children's data and COPPA compliance provision suggests either a policy change regarding child user handling or consolidation into general terms of service.

Removed clause text available with Compliance. See Compliance β†’
Provisions Modified
Government ID and Biometric Data Collection
High

Current version consolidates biometric and KYC data collection into a single provision and changes language from 'may collect' to 'collect,' emphasizing active collection of government-issued ID alongside biometric data.

Before/after clause text available with Compliance. See Compliance β†’
Law Enforcement and Government Disclosure
High

Text is substantively identical; provision name simplified from 'Law Enforcement Disclosure Without User Notification' to 'Law Enforcement and Government Disclosure' to be more concise.

Before/after clause text available with Compliance. See Compliance β†’
Third-Party and Blockchain Analytics Data Sharing
Medium

Current version consolidates three separate sharing provisions into one, removes specific mention of advertising partners and targeted advertising, downgraded from high to medium severity, and removes detailed justifications about AML and ecosystem integrity.

Before/after clause text available with Compliance. See Compliance β†’
Data Retention Policy
Medium

Current version replaces specific reference to post-closure retention for AML/financial reporting with a more general multi-factor retention assessment framework, and text appears truncated in the current version.

Before/after clause text available with Compliance. See Compliance β†’
Cookies and Device Tracking
Medium

Current version explicitly mentions third-party service providers and tracking technologies like web beacons, removes reference to 'referring URLs' and 'usage patterns/interactions,' and adds 'pages visited' and 'browsing activity.'

Before/after clause text available with Compliance. See Compliance β†’
Cross-Border Data Transfers
Medium

Current version removes focus on US-only transfers, broadens to any cross-border transfers, removes consent language, downgraded from high to medium severity, and adds reassurance about Standard Contractual Clauses safeguards.

Before/after clause text available with Compliance. See Compliance β†’

Cross-platform context

See how other platforms handle similar provisions across the ConductAtlas archive.

Compare across platforms → Browse regulations →

Full Changes

See the full side-by-side comparison of every sentence added, removed, and modified.

🔒 Full diff β€” Monitor

Document Context

Version history β†’ Policy drift analysis β†’ Document page β†’
Document
Coinbase Privacy Policy
Entity
Coinbase
Captured
May 28, 2026
Source URL
https://www.coinbase.com/legal/privacy
Other changes to Coinbase Privacy Policy
Previous change May 1, 2026
Coinbase made five minor editorial corrections to its Privacy Policy on May 1, 2026. The changes include fixing a spelling …
Low Neutral
View full version history →
More from Coinbase
May 21, 2026 Low
Coinbase Fee Schedule

Coinbase removed two sentences from its Fee Schedule on May 21, 2026: 'Need more help?' and 'Start a chat Chat …

May 15, 2026 High
Coinbase User Agreement

Coinbase updated its User Agreement on May 15, 2026 to introduce provisions for 'Secured USDC,' a new feature tied to …

May 2, 2026 Medium
Coinbase User Agreement

Coinbase removed references to Secured USDC (a digital asset holding mechanism tied to its One Card product) from its core …

Related Analysis
Consumer Rights · April 14, 2026
Coinbase Requires Mandatory Arbitration. You Have 30 Days to Opt Out.

Coinbase's User Agreement includes a mandatory arbitration clause that most users may not have reviewed. Here is what the clause states and…

Privacy · May 8, 2026
Meta Removed 438 Sentences From Its Privacy Policy. Here Is What Disappeared.

ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them t…

Privacy · May 7, 2026
TikTok Rewrote Its Privacy Policy After a $600M EU Fine

ConductAtlas tracked the restructuring, new disclosures, and entity changes that followed the largest privacy fine in EU history.

Track Coinbase policy changes

Get alerted when this policy changes again β€” including what changed and why it matters.

Prefer a weekly summary instead?

Get the biggest policy changes across 320+ platforms every Sunday.