CA-C-002476
SoFi — SoFi Privacy Notice
Entity
Date detected
May 30, 2026
Effective date
May 30, 2026
Severity
Direction
Negative
Affected users
all users us users
Taxonomy
Consent expansion
Changes
+4 sentences added · −3 sentences removed · 15 sentences modified
Share 𝕏 Share in Share 🔒 PDF
Get same-day alerts when SoFi changes We email you the diff and what it means, the day it happens.
Get same-day alerts →

Get the weekly digest

Every policy change across 844 tracked documents, once a week. No account needed.

Event Summary

SoFi's updated Privacy Notice contains two substantive policy changes. First, the company expanded the scope of tracking technologies it uses and discloses; previously the policy described cookies and their use in general terms, but the updated language explicitly states the company uses 'pixels and other tracking technologies' and shares collected information with 'social media, advertising, and analytics partners.' Second, the company modified its consent structure: previously users could 'choose not to allow some types of cookies,' but the updated terms state 'If you do not make a selection, you agree to our use of these technologies,' establishing opt-out rather than opt-in consent for tracking technologies.

MEDIUM

Consumer Impact

The updated terms establish a more permissive consent model for tracking technologies. Previously, the policy stated that users could 'choose not to allow some types of cookies' (opt-in structure). The revised language now states 'If you do not make a selection, you agree to our use of these technologies' (opt-out structure). This means that continued use of the website without affirmative rejection constitutes acceptance of cookies, pixels, and data sharing with advertising and analytics partners. The updated terms also explicitly disclose that SoFi shares collected information with 'social media, advertising, and analytics partners,' providing more specificity about data sharing destinations. You can decline the Privacy Preference Center or decline all optional tracking technologies through the updated preference settings.

Governance Analysis

The updated terms establish a material change in how SoFi collects consent for tracking technologies. The shift from opt-in to opt-out consent means users must now affirmatively decline tracking rather than affirmatively accept it. The explicit disclosure of data sharing with advertising partners provides clarity about downstream data destinations, but the opt-out consent structure may create compliance risk under CCPA/CPRA, which generally requires affirmative opt-in consent for nonessential tracking.

Available Actions

Access the Privacy Preference Center on SoFi's website and affirmatively decline cookies, pixels, and optional tracking technologies if you do not wish your data to be collected and shared with advertising partners

Review the updated Privacy Notice to understand which tracking technologies SoFi uses and which advertising and analytics partners receive your data

If No Action Is Taken

SoFi will collect your browsing activity, interaction data, and device information using cookies and tracking pixels

The collected information will be shared with social media, advertising, and analytics partners for marketing and profiling purposes

This tracking and data sharing will continue by default unless you affirmatively decline through the Privacy Preference Center

Historical Context

This is the 3rd significant Consent Expansion change SoFi has made since ConductAtlas began monitoring.

ConductAtlas has recorded 7 material changes to this document over 38 days of monitoring (since April 2026). An additional minor or cosmetic changes were excluded.

Across all monitored documents, SoFi has made 13 significant changes.

10 of SoFi's significant changes have been classified as negative for consumers.

Key Clauses Affected

consent mechanism for tracking technologies

Shifted from opt-in (users can choose to refuse cookies) to opt-out (inaction equals consent to cookies, pixels, and data sharing with advertising partners)

data sharing disclosure

Updated terms explicitly state that SoFi shares collected information with social media, advertising, and analytics partners

Full clause-by-clause analysis available with Analyst.
These clauses may change again. Get alerted when they do. Get same-day alerts →

This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology

Evidence Verification

✓ Verified
Previous Version
3d466f4a9bc816fc377d1c05922befd98aa063d1894a41126ad143a4b45f5921
May 29, 2026 05:02 UTC
✓ Verified
Current Version
deb41dea28eee70ce81327631740ada819c3daf89d8eaeeb663d27fd28130f79
May 30, 2026 00:20 UTC
✓ Verified
Change Detected
May 30, 2026 00:20 UTC
Analysis Methodology
✓ Verified
Source Document
https://www.sofi.com/privacy-policy/
Citation Record
Entity: SoFi
Document: SoFi Privacy Notice
Record ID: CA-C-002476
Captured: 2026-05-30 00:20:39 UTC
URL: https://conductatlas.com/change/2026-05-30-sofi-sofi-privacy-notice-2476/
Accessed: July 20, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.

Impact Summary

1
Expanded
1
Protection removed
Consumers Expanded

You must now actively decline tracking technologies; if you do nothing, SoFi will collect and share your data with advertising partners.

Consumers Added

The updated terms now clearly state that SoFi shares your data with advertising and analytics companies.

Consumers Removed

Previously you had explicit choice language; now the default is tracking unless you actively refuse.

For legal and compliance teams

Institutional Analysis

Assessment

SoFi's Privacy Notice was updated on May 30, 2026 to shift consent mechanisms from opt-in to opt-out for cookies, pixels, and third-party data sharing. The updated language explicitly discloses data sharing with advertising and analytics partners and establishes that failure to affirmatively decline tracking technologies constitutes consent. This change may implicate CCPA/CPRA requirements for California residents (which generally require affirmative opt-in for non-essential cookies) and FTC guidance on unfair or deceptive practices if the opt-out mechanism is not clear, prominent, or easily accessible. Compliance teams should evaluate whether the updated consent mechanism meets state-specific consent requirements and whether the updated disclosures align with GDPR obligations if any EU users are present.

Full institutional analysis

Regulatory exposure, obligation analysis, escalation trigger, board language, and recommended action.

Analyst $49/mo

ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-002476.

Full Changes

View complete diff →

Document Context

Version history → Policy drift analysis → Document page →
Document
SoFi Privacy Notice
Entity
SoFi
Captured
May 30, 2026
Source URL
https://www.sofi.com/privacy-policy/
Other changes to SoFi Privacy Notice
Previous change May 29, 2026
SoFi updated its privacy notice on May 29, 2026 to revise how it describes cookie and tracking technology practices. The …
Low Neutral
Next change May 31, 2026
SoFi updated its cookie and tracking technology disclosures on May 31, 2026. Previously, the privacy notice stated the company uses …
Low Positive
View full version history →
More from SoFi
Jul 17, 2026 Low
SoFi Privacy Notice (Superseded URL)

SoFi's Privacy Notice was updated to explicitly include 'Direct Deposit Bonus Amounts and Timing Structure' as a category of personal …

Jul 14, 2026 Medium
SoFi Terms of Service (Superseded URL)

SoFi restructured its Invest Referral Program from an open-ended referral model to a limited-time promotional offer running July 14 through …

Jul 14, 2026 Medium
SoFi Terms of Service

SoFi restructured its Invest Referral Program into a limited-time promotional offer running July 14, 2026 through September 30, 2026. The …

Related Analysis
Consumer Rights · April 21, 2026
Robinhood's Agreement Authorizes Position Liquidation Without Prior Notice

Buried in Robinhood's customer agreement is broad authority to close your positions, suspend your account, and force arbitration. Here is w…

Consumer Rights · April 21, 2026
Stripe's Reserve and Hold Authority: What the Terms Authorize

Stripe's terms authorize fund reserves, payout withholding, and account termination. Here is what the agreement states and what business ow…

Track SoFi policy changes

Get alerted when this policy changes again — including what changed and why it matters.