McDonald's updated its privacy policy on July 2, 2026, expanding its country-specific privacy addenda to include Australia and New Zealand. The company also added language clarifying that it shares personal information with advertisers that place ads through its advertising services, in addition to social media and analytics providers. The policy updated its California privacy request metrics to cover January-December 2025 instead of 2024, showing increased request volume across all categories.
The updated policy now explicitly covers Australia and New Zealand with country-specific privacy addenda, extending the company's privacy notice scope to those markets. The revised language clarifies that McDonald's discloses personal information including email addresses, pseudonymized identifiers, and usage inferences to advertisers that place ads through its advertising services, in addition to social media and analytics providers. This clarification makes explicit what was previously implicit regarding the breadth of advertising partners who receive personal information.
The updated policy extends McDonald's privacy framework to Australia and New Zealand, establishing country-specific privacy rights for users in those markets. The clarified language regarding advertising partners receiving personal information makes explicit what data categories and recipient types are involved in targeted advertising, supporting transparency regarding how the company processes and shares customer data.
Expanded to include Australia and New Zealand alongside existing European and US addenda.
Clarified that personal information is shared with advertisers placing ads through McDonald's advertising services, in addition to social media and analytics providers.
Updated reporting period from January-December 2024 to January-December 2025, showing increased request volume across all categories.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
McDonald's added Australia and New Zealand to its country-specific privacy addenda and clarified language describing data sharing with advertisers operating through its advertising services. These changes appear to be geographic expansion and transparency clarification rather than material policy shifts. Organizations relying on McDonald's as a vendor or partner may wish to note the expanded jurisdictional scope, but the operative data-sharing practices appear unchanged. No new legal obligations appear to arise from these edits.
Full compliance analysis
Obligation analysis, escalation trigger, board language, and recommended action.
Monitor: regulatory citations + obligations. Compliance: full compliance memo.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003422.
See the full side-by-side comparison of every sentence added, removed, and modified.
🔒 Full diff — MonitorNetflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the …
TikTok's data collection extends to device sensors, clipboard content, geolocation, and cross-site tracking. Here is what their Privacy Pol…
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get alerted when this policy changes again — including what changed and why it matters.
Prefer a weekly summary instead?
Get the biggest policy changes across 320+ platforms every Sunday.