We email you the diff and what it means, the day it happens.
Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
On June 18, 2026, Google expanded its Privacy Policy to include explicit disclosures required by U.S. state privacy laws, particularly the California Consumer Privacy Act. The updated policy now contains a dedicated section describing the types of data Google collects, user rights under state laws (access, deletion, opt-out of targeted advertising), and Google's statements that it does not sell personal information or share it under the CCPA definition. The policy also adds a navigational tool and organizes data practices into state-law-specific categories, making compliance statements more prominent and procedurally accessible.
The updated Privacy Policy now explicitly discloses how Google handles data under U.S. state privacy laws, particularly California's CCPA. Google states that it does not sell personal information and does not share it as that term is defined under the CCPA. The policy details user rights to access information, request deletion, correct information, and opt out of certain profiling and targeted advertising. Users can exercise these rights through tools like My Activity and My Ad Center, or by contacting Google directly. The policy also provides specific handling of health data under Washington's My Health My Data Act and Nevada Senate Bill 370, where Google processes such information only with user consent or as otherwise permitted by law.
The updated policy formalizes and centralizes U.S. state privacy law disclosures that were previously scattered or less explicit, making it operationally clearer how users can exercise rights under the CCPA, Washington My Health My Data Act, and Nevada SB 370. This reduces ambiguity around Google's data practices and user remedies, though it does not change the underlying technical data collection or use practices.
→ Review the updated 'Your privacy controls' section to understand available tools like My Activity and My Ad Center for accessing, correcting, or deleting your data.
→ Use My Ad Center to control what information Google uses to show you ads or turn off personalized ads.
→ Contact Google directly if you have questions or requests related to your rights under U.S. state privacy laws, or if you disagree with a decision on your request.
→ Without consulting the updated privacy controls, you may not be aware of tools available to manage or delete your data or to control ad personalization.
→ If you do not exercise privacy rights available under state law, Google will continue standard data collection and use practices as described in the policy.
ConductAtlas has recorded 2 material changes to this document over 60 days of monitoring (since April 2026). An additional minor or cosmetic changes were excluded.
Across all monitored documents, Google has made 7 significant changes.
4 of Google's significant changes have been classified as negative for consumers.
Policy explicitly states Google does not sell personal information and does not 'share' it under CCPA definition, providing direct response to CCPA transparency requirements.
Added comprehensive disclosure of CCPA rights including access, deletion, correction, opt-out of profiling/targeted ads, and non-discrimination guarantees.
New disclosure that health information subject to Washington and Nevada laws is processed with user consent or as otherwise permitted by those laws.
These clauses may change again. Monitor gets you a same-day alert with the diff.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Google has materially expanded its Privacy Policy to explicitly address U.S. state privacy law requirements, including the California Consumer Privacy Act, Washington My Health My Data Act, and Nevada Senate Bill 370. The change adds formal disclosures of data categories, user rights (access, deletion, correction, opt-out), and Google's non-sale practices. This appears responsive to state-level regulatory requirements rather than creating new technical data handling practices. Organizations that reference Google's privacy disclosures in their own privacy notices or data processing agreements should review whether these additions affect their required vendor disclosures or customer-facing privacy documentation.
Regulatory exposure, obligation analysis, escalation trigger, board language, and recommended action.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003077.
YouTube Ads removed two sentences from their Google Privacy Policy related to a navigational tool for the policy. The removed …
On June 25, 2026, YouTube Ads modified a single sentence in the Google Privacy Policy footer. The word 'close' was …
Google updated its Terms of Service on June 25, 2026, making changes to warranty disclaimers, liability limitations, content removal procedures, …
AI Mode, AI Overviews, and embedded advertising are shifting search from referral infrastructure toward platform-contained answers.
Google deployed Gemini Nano through Chrome updates, enabling on-device AI features for some users — often without clear user awareness or e…
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get alerted when this policy changes again, including what changed and why it matters.