Ancestry updated their Ancestry Privacy Statement on June 02, 2026. Change detected: 1 sentence(s) modified. Document contained 348 sentences after update.
Impact assessment pending documentation review.
Institutional analysis pending. This change has been verified and documented.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
This expands data sharing scope to explicitly include advertising and analytics partners and allows third-party ad companies direct collection of activity data, significantly broadening monetization of user information.
Newly detailed provision explicitly documenting automatic collection of tracking data across multiple categories that could enable comprehensive user profiling beyond genetic ancestry services.
New provision with vague 'legitimate business purposes' language allows indefinite retention post-deletion, weakening user control over personal data.
Explicit acknowledgment of research data persistence was removed, potentially obscuring the permanent incorporation of user data into research despite deletion requests.
Removal of explicit confidentiality requirements for research partners and the reassurance that DNA data is not sold to third parties diminishes user protections and transparency around research sharing.
Removal of COPPA compliance provisions and deletion procedures for children's data weakens legal protections for minors.
Removal of explicit GDPR/UK GDPR rights provisions eliminates detailed disclosure of European privacy protections and data controller identification.
This detailed provision specifying service provider obligations and limitation of use was replaced with vaguer language in the advertising/analytics section, reducing contractual clarity around data protection.
Removed specific mention of saliva sample collection and destruction rights; expanded to include health conditions and physical traits; shifted from 'choose to participate' to 'opted in to our research program'.
Removed notification requirement, opportunity to opt out, and disclosure of changes to privacy policy; significantly weakened user protections in corporate transactions.
Generalized California-specific CCPA/CPRA rights into jurisdiction-dependent language; removed explicit mention of the right to know what is collected/disclosed, right to limit sensitive data use, and removal of specific toll-free number contact method.
Cross-platform context
See how other platforms handle similar provisions across the ConductAtlas archive.
See the full side-by-side comparison of every sentence added, removed, and modified.
🔒 Full diff — MonitorAncestry revised its arbitration fee and cost-sharing provisions on May 14, 2026. Previously, both parties shared filing fees and arbitrator …
Ancestry updated its Privacy Statement on May 13, 2026, making 46 sentence additions, 52 removals, and 54 modifications across the …
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the …
TikTok's data collection extends to device sensors, clipboard content, geolocation, and cross-site tracking. Here is what their Privacy Pol…
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get alerted when this policy changes again — including what changed and why it matters.
Prefer a weekly summary instead?
Get the biggest policy changes across 320+ platforms every Sunday.