CA-C-002472
TurboTax — TurboTax Privacy Statement
Entity
Date detected
May 29, 2026
Effective date
May 29, 2026
Severity
Direction
Negative
Affected users
all users US users
Taxonomy
Transparency removal
Changes
−5 sentences removed · 4 sentences modified
Share 𝕏 Share in Share 🔒 PDF
Watch TurboTax Get alerts when this policy changes.
Watch — Free

Event Summary

TurboTax updated its cookie and tracking technology disclosure on May 29, 2026, restructuring how it describes advertising practices. The previous version explained that TurboTax and advertising partners use cookies to deliver relevant ads, mentioned that information like IP addresses and device identifiers may be shared with partners, and provided an explicit opt-out mechanism by toggling preferences and clicking 'Save My Choices'. The updated version removes the specific mention of IP address and device identifier sharing with advertising partners, removes the explicit opt-out toggle mechanism, and replaces detailed explanatory language with a more generic description that cookies help prevent ad repetition and select interest-based ads. The practical effect is that users no longer have a documented opt-out procedure within the privacy statement itself.

MEDIUM

Consumer Impact

The updated privacy statement no longer describes a specific opt-out procedure for advertising cookies that was previously available. The prior version stated users could 'opt out of having your personal information used or disclosed for these purposes by sliding the toggle to No and clicking Save My Choices', but this mechanism and accompanying language are no longer present in the updated disclosure. The updated terms also no longer explicitly state that IP addresses and device identifiers may be shared with advertising partners, removing prior transparency about what data types are disclosed. You should review TurboTax's main Privacy Policy to determine if opt-out mechanisms exist elsewhere or what the current data-sharing practices are.

Governance Analysis

The updated statement removes a documented opt-out mechanism for advertising cookies and eliminates explicit disclosure of data sharing (IP addresses, device identifiers) with advertising partners. These removals reduce transparency about consent options and data practices previously disclosed to users, creating potential compliance exposure under FTC Act Section 5 (material omissions) and state privacy laws (CCPA, CPRA) that require disclosure of data practices and opt-out rights.

Available Actions

Review TurboTax's full Privacy Policy to determine whether opt-out mechanisms for advertising cookies are documented elsewhere.

Check TurboTax's cookie settings or preferences page to see if user controls for targeted advertising remain available outside this statement.

If No Action Is Taken

The terms as updated no longer document an opt-out mechanism within this privacy statement, so users relying on the prior statement may be unaware of how to decline advertising cookies.

Data sharing practices with advertising partners are no longer explicitly disclosed in this statement, reducing transparency about what information is shared.

Historical Context

ConductAtlas has recorded 2 material changes to this document (since May 2026). An additional minor or cosmetic changes were excluded.

Key Clauses Affected

opt-out mechanism for advertising cookies

Removed documented procedure allowing users to decline advertising cookie use by toggling preferences and clicking 'Save My Choices'.

data sharing with advertising partners

Removed explicit disclosure that IP addresses and device identifiers may be shared with advertising partners.

advertising cookie description

Replaced detailed explanation of sharing practices with generic description of cookie functions (preventing ad repetition, enabling interest-based selection).

Full clause-by-clause analysis available with Compliance.
These clauses may change again. Get alerted when they do. Watch TurboTax — Free

This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology

Evidence Verification

✓ Verified
Previous Version
14635c806577d005cf48be60351c09f8bb2f882e7801f130ce87818f7363ebde
May 23, 2026 00:43 UTC
✓ Verified
Current Version
7fd33087f493884f739b98264814310fbc6ba06537276b732055d636edfec67e
May 29, 2026 05:51 UTC
✓ Verified
Change Detected
May 29, 2026 05:51 UTC
Analysis Methodology
✓ Verified
Source Document
https://security.intuit.com/privacy/
Citation Record
Entity: TurboTax
Document: TurboTax Privacy Statement
Record ID: CA-C-002472
Captured: 2026-05-29 05:51:23 UTC
URL: https://conductatlas.com/change/2026-05-29-turbotax-turbotax-privacy-statement-2472/
Accessed: May 31, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.

Impact Summary

2
Protections removed
Consumers Removed

Users no longer have a documented way within this privacy statement to decline the use of advertising cookies.

Consumers Removed

The statement no longer clearly explains what specific data types are shared with ad partners.

For legal and compliance teams

Institutional Analysis

Assessment

TurboTax removed language from its privacy statement disclosing the opt-out mechanism for targeted advertising and explicit mention of IP address and device identifier sharing with ad partners. This removal may engage FTC scrutiny under Section 5 of the FTC Act if the prior disclosures were relied upon by consumers to make decisions, or if the removal is viewed as material omission of previously disclosed data practices. Under CCPA/CPRA, California residents retain statutory rights to opt out of the sale or sharing of personal information regardless of what the privacy statement states, but removal of a documented mechanism creates ambiguity about how such rights are exercised. A compliance review should determine whether the opt-out mechanism was relocated to the main Privacy Policy, whether data-sharing practices with advertisers continue as previously described, and whether the statement now requires clarification or correction.

Regulatory Exposure

FTC Act Section 5 (unfair or deceptive practices); CCPA/CPRA (California consumer rights, sale and sharing of personal information); GDPR Article 7 (conditions for consent); state privacy laws (opt-out mechanisms).

Full compliance analysis

Obligation analysis, escalation trigger, board language, and recommended action.

Monitor $19/mo Compliance $249/mo

Monitor: regulatory citations + obligations. Compliance: full compliance memo.

ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-002472.

Full Changes

See the full side-by-side comparison of every sentence added, removed, and modified.

🔒 Full diff — Monitor

Document Context

Version history → Policy drift analysis → Document page →
Document
TurboTax Privacy Statement
Entity
TurboTax
Captured
May 29, 2026
Source URL
https://security.intuit.com/privacy/
Other changes to TurboTax Privacy Statement
Previous change May 23, 2026
TurboTax updated its privacy policy on May 23, 2026 to add detailed disclosure of its cookie and tracking technology practices. …
Medium Neutral
View full version history →
More from TurboTax
May 23, 2026 Medium
TurboTax Privacy Statement

TurboTax updated its privacy policy on May 23, 2026 to add detailed disclosure of its cookie and tracking technology practices. …

May 22, 2026 Low
TurboTax Privacy Statement

TurboTax's Privacy Statement was updated on May 22, 2026. The change was a minor modification to the footer navigation and …

May 21, 2026 Low
TurboTax Privacy Statement

TurboTax removed two navigation links ('Customer Research' and 'For Individuals' section header) from the footer of their Privacy Statement on …

Related Analysis
Privacy · May 8, 2026
Meta Removed 438 Sentences From Its Privacy Policy. Here Is What Disappeared.

ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them t…

Privacy · May 7, 2026
TikTok Rewrote Its Privacy Policy After a $600M EU Fine

ConductAtlas tracked the restructuring, new disclosures, and entity changes that followed the largest privacy fine in EU history.

Privacy · April 16, 2026
23andMe Is Bankrupt. What Happens to Your DNA Now?

Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do…

Track TurboTax policy changes

Get alerted when this policy changes again — including what changed and why it matters.

Prefer a weekly summary instead?

Get the biggest policy changes across 320+ platforms every Sunday.