Intuit's privacy policy was updated on July 17, 2026 to substantially expand its Data Privacy Framework (DPF) compliance disclosures and procedures. The updated language provides detailed operational procedures for DPF Principles-related complaints, dispute resolution mechanisms, and onward transfer liability. Notably, the policy adds explicit language requiring opt-out or opt-in consent before using personal data for materially new purposes or sharing with external parties not covered as processors.
Consumers: Before using your data in a new way or sharing it with a third party outside their normal processor relationships, Mailchimp must give you a choice to opt out or must ask for your permission first.
Consumers: If you have a complaint about how your data is handled under the Data Privacy Framework, Mailchimp will handle it first, then refer unresolved issues to TRUSTe, a free dispute service.
Data controllers: Mailchimp is legally responsible for ensuring that companies it uses to process data on its behalf comply with Data Privacy Framework rules.
Consumers: If disputes about Data Privacy Framework compliance cannot be resolved through normal procedures or TRUSTe, you may have the option to pursue binding arbitration.
The updated terms establish new procedures for handling personal data complaints related to international data transfers under the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Frameworks. Users from these jurisdictions now have access to defined complaint and dispute resolution mechanisms, including referral to TRUSTe as an alternative dispute provider at no cost, and binding arbitration under certain conditions. Additionally, the policy now requires that before personal data is used for a materially new purpose or shared with external parties not covered as processors, Mailchimp will offer users the opportunity to opt out through appropriate means or collect opt-in consent.
→ EU, UK, and Swiss users can file DPF Principles-related complaints by contacting Mailchimp using the 'How to contact us' section; unresolved complaints can be escalated to TRUSTe at https://feedback-form.trustarc.com/watchdog/request at no cost.
→ Review Mailchimp's updated privacy policy and DPF certification at https://www.dataprivacyframework.gov to understand your specific data transfer protections.
→ When Mailchimp notifies you of materially new uses of your personal data or sharing with external parties not covered as processors, exercise the opt-out option if provided or decline to provide opt-in consent if you prefer not to participate.
Added defined procedures for DPF Principles-related complaints, referral to TRUSTe at no cost, and binding arbitration option for unresolved disputes.
Added affirmative obligation to offer opt-out or collect opt-in consent before using personal data for materially new purposes or sharing with external parties not covered as processors.
Clarified that Mailchimp remains liable under DPF Principles for agents' processing of personal data transferred under the DPF frameworks.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Intuit substantially expanded its DPF compliance disclosures in an update detected on July 17, 2026. The change adds operational procedures for DPF Principles-related complaints, establishes referral to TRUSTe for dispute resolution, clarifies liability for onward …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003770.
Intuit expanded its privacy policy to add explicit cookie consent management controls and disclosure language. The updated policy describes how …
Intuit's privacy statement was revised to clarify that the opt-out mechanism for marketing text messages applies to all marketing SMS …
Intuit updated its Privacy Statement to replace references to its 'short code program' with 'text messaging program.' The operative protection …
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.