Get the weekly digest
Every policy change across 844 tracked documents, once a week. No account needed.
Intuit's privacy policy was updated on July 17, 2026 to substantially expand its Data Privacy Framework (DPF) compliance disclosures and procedures. The updated language provides detailed operational procedures for DPF Principles-related complaints, dispute resolution mechanisms, and onward transfer liability. Notably, the policy adds explicit language requiring opt-out or opt-in consent before using personal data for materially new purposes or sharing with external parties not covered as processors.
The updated terms establish new procedures for handling personal data complaints related to international data transfers under the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Frameworks. Users from these jurisdictions now have access to defined complaint and dispute resolution mechanisms, including referral to TRUSTe as an alternative dispute provider at no cost, and binding arbitration under certain conditions. Additionally, the policy now requires that before personal data is used for a materially new purpose or shared with external parties not covered as processors, Mailchimp will offer users the opportunity to opt out through appropriate means or collect opt-in consent.
The updated policy establishes new procedural protections and operational requirements for international personal data transfers under the Data Privacy Frameworks. For EU, UK, and Swiss users, the change creates formal complaint and dispute resolution mechanisms, including TRUSTe referral and binding arbitration options. For all users, the updated terms introduce a new requirement that Mailchimp must offer opt-out or obtain opt-in consent before using personal data for materially new purposes or sharing with external parties outside its normal processor relationships.
→ EU, UK, and Swiss users can file DPF Principles-related complaints by contacting Mailchimp using the 'How to contact us' section; unresolved complaints can be escalated to TRUSTe at https://feedback-form.trustarc.com/watchdog/request at no cost.
→ Review Mailchimp's updated privacy policy and DPF certification at https://www.dataprivacyframework.gov to understand your specific data transfer protections.
→ When Mailchimp notifies you of materially new uses of your personal data or sharing with external parties not covered as processors, exercise the opt-out option if provided or decline to provide opt-in consent if you prefer not to participate.
→ If you do not review the updated DPF complaint procedures, you may be unaware of your right to file a complaint with TRUSTe or pursue binding arbitration under certain conditions.
→ If Mailchimp introduces a materially new use of your personal data or sharing arrangement and you do not act on the opt-out or consent request provided, the updated terms will apply as written.
ConductAtlas has recorded 4 material changes to this document over 81 days of monitoring (since April 2026). An additional minor or cosmetic changes were excluded.
2 of Intuit's significant changes have been classified as negative for consumers.
Added defined procedures for DPF Principles-related complaints, referral to TRUSTe at no cost, and binding arbitration option for unresolved disputes.
Added affirmative obligation to offer opt-out or collect opt-in consent before using personal data for materially new purposes or sharing with external parties not covered as processors.
Clarified that Mailchimp remains liable under DPF Principles for agents' processing of personal data transferred under the DPF frameworks.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Before using your data in a new way or sharing it with a third party outside their normal processor relationships, Mailchimp must give you a choice to opt out or must ask for your permission first.
If you have a complaint about how your data is handled under the Data Privacy Framework, Mailchimp will handle it first, then refer unresolved issues to TRUSTe, a free dispute service.
Mailchimp is legally responsible for ensuring that companies it uses to process data on its behalf comply with Data Privacy Framework rules.
If disputes about Data Privacy Framework compliance cannot be resolved through normal procedures or TRUSTe, you may have the option to pursue binding arbitration.
Intuit substantially expanded its DPF compliance disclosures in an update detected on July 17, 2026. The change adds operational procedures for DPF Principles-related complaints, establishes referral to TRUSTe for dispute resolution, clarifies liability for onward transfers, and adds a new procedural requirement for opt-out or opt-in consent before materially new personal data uses or external third-party sharing. This change likely reflects updated Data Privacy Framework certification requirements or internal policy refinement following regulatory guidance. Organizations relying on Intuit or Mailchimp services for EU, UK, or Swiss data processing should confirm their own vendor agreements address these dispute resolution and consent mechanisms.
Full compliance analysis
Regulatory exposure, obligation analysis, escalation trigger, board language, and recommended action.
Analyst $49/moConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003770.
Intuit updated its Privacy Statement on July 8, 2026 to replace references to its 'short code program' with 'text messaging …
Intuit removed detailed information about cookies, tracking technologies, and advertising practices from its privacy statement. The updated policy no longer …
Intuit updated its privacy policy on May 22, 2026 to add explicit cookie and tracking technology disclosures and consent controls. …
Get alerted when this policy changes again — including what changed and why it matters.