CA-C-002466
SoFi — SoFi Privacy Notice
Entity
Date detected
May 29, 2026
Effective date
May 29, 2026
Severity
Low
Direction
Neutral
Affected users
all users
Taxonomy
Disclosure requirement change
Changes
+3 sentences added · −3 sentences removed · 13 sentences modified
Share 𝕏 Share in Share 🔒 PDF
Get same-day alerts when SoFi changes We email you the diff and what it means, the day it happens.
Get same-day alerts →

Get the weekly digest

Every policy change across 844 tracked documents, once a week. No account needed.

Event Summary

SoFi updated its privacy notice on May 29, 2026 to revise how it describes cookie and tracking technology practices. The prior version stated that SoFi shares collected information with social media, advertising, and analytics partners, and that users must affirmatively opt out of cookies by toggling buttons per category, with no opt-out available for strictly necessary cookies. The updated version introduces a Privacy Preference Center that describes cookies in more general terms, explains that information may be used for site functionality and personalization, and states that users can choose not to allow some types of cookies, though blocking certain cookies may impact site experience. The operational change shifts from a toggle-based opt-out interface to a more detailed disclosure framework with apparent opt-in or selective-permission language for non-essential cookies.

LOW

Consumer Impact

The updated privacy notice introduces a Privacy Preference Center that allows users to choose not to enable certain types of cookies. The prior version required users to toggle opt-out buttons for each category, with strictly necessary cookies stated as non-optional. The revised language now indicates that users can choose not to allow some types of cookies, though the notice states that blocking certain cookie types may impact the site experience and services available. The practical difference is the shift from a toggle-based rejection interface to a preference center that may emphasize cookie categories and their functional trade-offs. You can access the Privacy Preference Center to select which types of cookies to allow.

Governance Analysis

The updated notice reorganizes how SoFi discloses cookie practices and user controls, but removes explicit mention of third-party data sharing (social media, advertising, analytics partners) that was stated in the prior version. This change affects how transparent the privacy notice is about data recipient categories and whether users can easily identify which third parties receive their information. The shift to a preference center may improve user control if the interface provides granular opt-in/opt-out options, but the absence of the prior third-party disclosure language creates ambiguity about whether those partnerships are still disclosed elsewhere in the preference center.

Available Actions

Visit the Privacy Preference Center when you access SoFi to review which cookie categories are enabled and adjust your preferences

Review whether the Preference Center discloses which third parties (advertising, analytics, social media partners) receive your data and select your preferences accordingly

If No Action Is Taken

The updated terms authorize SoFi to use cookies and tracking technologies according to the settings you select in the Privacy Preference Center, or per default settings if you do not make a selection

If you do not configure your cookie preferences, functional and analytical cookies may be enabled by default, meaning your browsing activity and preferences may be collected and potentially shared as described in the preference center

Key Clauses Affected

Privacy Preference Center introduction

Replaces prior toggle-based opt-out model with a preference center framework that explains cookie types and allows users to select which cookies to enable.

Third-party sharing disclosure

Language explicitly mentioning sharing with 'social media, advertising, and analytics partners' was removed without direct replacement in the updated version.

Functional cookie description

Updated language emphasizes that functional cookies enable 'enhanced functionality and personalisation' and may be set by third-party providers, with warning that blocking them may impact site services.

Full clause-by-clause analysis available with Analyst.
These clauses may change again. Get alerted when they do. Get same-day alerts →

This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology

Evidence Verification

✓ Verified
Previous Version
d01c64d77b37929aa9c401e0c1219ce4d91d6027739103b9a4e9add2265358f7
May 23, 2026 00:14 UTC
✓ Verified
Current Version
3d466f4a9bc816fc377d1c05922befd98aa063d1894a41126ad143a4b45f5921
May 29, 2026 05:02 UTC
✓ Verified
Change Detected
May 29, 2026 05:02 UTC
Analysis Methodology
✓ Verified
Source Document
https://www.sofi.com/privacy-policy/
Citation Record
Entity: SoFi
Document: SoFi Privacy Notice
Record ID: CA-C-002466
Captured: 2026-05-29 05:02:13 UTC
URL: https://conductatlas.com/change/2026-05-29-sofi-sofi-privacy-notice-2466/
Accessed: July 21, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
For legal and compliance teams

Institutional Analysis

Assessment

This change appears to be a reformatting and reframing of cookie disclosures from a toggle-based opt-out model to a Privacy Preference Center model. The substantive content remains similar: functional and analytical cookies are described as non-essential with user choice available, while strictly necessary cookies remain mandatory. The change does not appear to alter the types of cookies used, data shared, or processing purposes. From a regulatory compliance perspective, the update addresses cookie consent disclosures under GDPR, CCPA, and ePrivacy regulations in a manner that emphasizes user choice for non-essential cookies. The reframing toward a preference center may align with regulatory guidance emphasizing explicit consent for non-essential tracking, though enforceability depends on how granularly users can control specific cookie categories in practice. No immediate compliance action appears required unless the preference center fails to provide functional opt-out controls matching the disclosed categories.

Full institutional analysis

Regulatory exposure, obligation analysis, escalation trigger, board language, and recommended action.

Analyst $49/mo

ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-002466.

Full Changes

View complete diff →

Document Context

Version history → Policy drift analysis → Document page →
Document
SoFi Privacy Notice
Entity
SoFi
Captured
May 29, 2026
Source URL
https://www.sofi.com/privacy-policy/
Other changes to SoFi Privacy Notice
Previous change May 23, 2026
SoFi updated its Privacy Preference Center disclosure on May 23, 2026, replacing language about cookies with explicit statements about pixel …
Medium Neutral
Next change May 30, 2026
SoFi's updated Privacy Notice contains two substantive policy changes. First, the company expanded the scope of tracking technologies it uses …
Medium Negative
View full version history →
More from SoFi
Jul 17, 2026 Low
SoFi Privacy Notice (Superseded URL)

SoFi's Privacy Notice was updated to explicitly include 'Direct Deposit Bonus Amounts and Timing Structure' as a category of personal …

Jul 14, 2026 Medium
SoFi Terms of Service (Superseded URL)

SoFi restructured its Invest Referral Program from an open-ended referral model to a limited-time promotional offer running July 14 through …

Jul 14, 2026 Medium
SoFi Terms of Service

SoFi restructured its Invest Referral Program into a limited-time promotional offer running July 14, 2026 through September 30, 2026. The …

Related Analysis
Consumer Rights · April 21, 2026
Robinhood's Agreement Authorizes Position Liquidation Without Prior Notice

Buried in Robinhood's customer agreement is broad authority to close your positions, suspend your account, and force arbitration. Here is w…

Consumer Rights · April 21, 2026
Stripe's Reserve and Hold Authority: What the Terms Authorize

Stripe's terms authorize fund reserves, payout withholding, and account termination. Here is what the agreement states and what business ow…

Track SoFi policy changes

Get alerted when this policy changes again — including what changed and why it matters.