New explicit disclosure of biometric data collection during KYC processes represents a significant privacy expansion that was not previously disclosed.

Newly granular disclosure of highly sensitive personal identifiers (government ID, SSN) that were previously bundled under KYC collection.

New explicit provision detailing collection of transaction history and payment information, expanding disclosure beyond basic financial account data.

Removal of explicit retention policy disclosure post-account closure reduces transparency on data lifecycle management.

Removal of cross-border data transfer provision obscures where user data may be processed internationally.

Removal of affiliate-specific data sharing disclosure consolidates sharing practices into broader third-party provisions, reducing specificity.

Severity downgraded from high to medium and provision expanded to explicitly mention regulatory authorities and government agencies alongside law enforcement.

Renamed from 'CCPA Rights for California Residents' and now explicitly lists specific rights (know, delete, correct, opt out of sale/sharing).

Renamed to include 'Behavioral' and now specifies named tracking tools (Google Tag Manager, Google Analytics, RudderStack) with explicit purposes.

Renamed from 'Third-Party Data Sharing for Marketing' and expanded to explicitly include analytics and service provider partners beyond marketing; severity downgraded from high to medium.

Split into two separate provisions (Government ID and SSN Collection, and Financial Account Data) with more granular detail on specific data types collected.