SoFi updated its privacy notice on May 29, 2026 to revise how it describes cookie and tracking technology practices. The prior version stated that SoFi shares collected information with social media, advertising, and analytics partners, and that users must affirmatively opt out of cookies by toggling buttons per category, with no opt-out available for strictly necessary cookies. The updated version introduces a Privacy Preference Center that describes cookies in more general terms, explains that information may be used for site functionality and personalization, and states that users can choose not to allow some types of cookies, though blocking certain cookies may impact site experience. The operational change shifts from a toggle-based opt-out interface to a more detailed disclosure framework with apparent opt-in or selective-permission language for non-essential cookies.
The updated privacy notice introduces a Privacy Preference Center that allows users to choose not to enable certain types of cookies. The prior version required users to toggle opt-out buttons for each category, with strictly necessary cookies stated as non-optional. The revised language now indicates that users can choose not to allow some types of cookies, though the notice states that blocking certain cookie types may impact the site experience and services available. The practical difference is the shift from a toggle-based rejection interface to a preference center that may emphasize cookie categories and their functional trade-offs. You can access the Privacy Preference Center to select which types of cookies to allow.
The updated notice reorganizes how SoFi discloses cookie practices and user controls, but removes explicit mention of third-party data sharing (social media, advertising, analytics partners) that was stated in the prior version. This change affects how transparent the privacy notice is about data recipient categories and whether users can easily identify which third parties receive their information. The shift to a preference center may improve user control if the interface provides granular opt-in/opt-out options, but the absence of the prior third-party disclosure language creates ambiguity about whether those partnerships are still disclosed elsewhere in the preference center.
→ Visit the Privacy Preference Center when you access SoFi to review which cookie categories are enabled and adjust your preferences
→ Review whether the Preference Center discloses which third parties (advertising, analytics, social media partners) receive your data and select your preferences accordingly
→ The updated terms authorize SoFi to use cookies and tracking technologies according to the settings you select in the Privacy Preference Center, or per default settings if you do not make a selection
→ If you do not configure your cookie preferences, functional and analytical cookies may be enabled by default, meaning your browsing activity and preferences may be collected and potentially shared as described in the preference center
Replaces prior toggle-based opt-out model with a preference center framework that explains cookie types and allows users to select which cookies to enable.
Language explicitly mentioning sharing with 'social media, advertising, and analytics partners' was removed without direct replacement in the updated version.
Updated language emphasizes that functional cookies enable 'enhanced functionality and personalisation' and may be set by third-party providers, with warning that blocking them may impact site services.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
This change appears to be a reformatting and reframing of cookie disclosures from a toggle-based opt-out model to a Privacy Preference Center model. The substantive content remains similar: functional and analytical cookies are described as non-essential with user choice available, while strictly necessary cookies remain mandatory. The change does not appear to alter the types of cookies used, data shared, or processing purposes. From a regulatory compliance perspective, the update addresses cookie consent disclosures under GDPR, CCPA, and ePrivacy regulations in a manner that emphasizes user choice for non-essential cookies. The reframing toward a preference center may align with regulatory guidance emphasizing explicit consent for non-essential tracking, though enforceability depends on how granularly users can control specific cookie categories in practice. No immediate compliance action appears required unless the preference center fails to provide functional opt-out controls matching the disclosed categories.
GDPR Article 7 (conditions for consent), GDPR Article 82 (right to compensation), ePrivacy Directive 2002/58/EC (cookie consent requirements), CCPA (California Consumer Privacy Act) cookie disclosures, FTC Endorsement Guides (privacy notice accuracy)
Full compliance analysis
Obligation analysis, escalation trigger, board language, and recommended action.
Monitor: regulatory citations + obligations. Compliance: full compliance memo.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-002466.
See the full side-by-side comparison of every sentence added, removed, and modified.
🔒 Full diff — MonitorSoFi's Terms of Service was updated on May 29, 2026 to explicitly reference the Arbitration Agreement as a binding component …
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the …
TikTok's data collection extends to device sensors, clipboard content, geolocation, and cross-site tracking. Here is what their Privacy Pol…
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get alerted when this policy changes again — including what changed and why it matters.
Prefer a weekly summary instead?
Get the biggest policy changes across 320+ platforms every Sunday.