Change record
CA-X-003770
Intuit Privacy Statement
Entity
Date detected
July 17, 2026
Severity
Direction
Positive
Taxonomy
Disclosure requirement change
Changes
+12 sentences added · 6 sentences modified

Impact Summary

Generated by a model from the captured document; not read by a person
Medium Positive for users
Affected users
EU users UK users Swiss users All users

Intuit revised its privacy statement to clarify terminology and expand its Data Privacy Framework (DPF) compliance disclosures. The updated language replaces references to 'text messaging program' with 'short code program' and provides detailed information about DPF certification, dispute resolution mechanisms, and data transfer safeguards for EU, UK, and Swiss residents. The change adds explicit commitments regarding complaint handling, alternative dispute resolution through TRUSTe, and binding arbitration options for unresolved DPF-related complaints.

4 new obligations 2 obligations expanded

Consumers: If you have a complaint about how your data is handled under the Data Privacy Framework, Mailchimp will work to resolve it through multiple channels, including a neutral third party if needed.

Consumers: Before Mailchimp uses your data in a new way or shares it with a company not mentioned in this privacy policy, it will ask for your permission or let you opt out.

Data controllers: Mailchimp is responsible for how its service providers handle your data under the Data Privacy Framework, unless it can prove it did not cause the problem.

Data controllers: Mailchimp may have to share your data with government agencies if required by law.

Consumers: If there is a disagreement between this privacy policy and the Data Privacy Framework rules, the Data Privacy Framework rules will apply.

Consumers: Mailchimp clarified that when you sign up for SMS texts, your information will not be sold or shared with other companies for their marketing.

Stay ahead of the changes
Track Intuit and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Share 𝕏 Share in Share 🔒 PDF

What this means for you

Generated by a model from the captured document; not read by a person

The updated terms establish new dispute resolution procedures for EU, UK, and Swiss residents whose personal data is transferred under the Data Privacy Framework. The revised language states that Intuit and Mailchimp have certified compliance with DPF Principles and commits to resolve DPF-related complaints through direct contact, alternative dispute resolution via TRUSTe, and binding arbitration for unresolved complaints. The terms also clarify that when personal data is used for a materially different purpose or shared with external parties not covered by the privacy policy, Mailchimp will offer an opt-out opportunity or collect opt-in consent before proceeding. You can file a complaint with TRUSTe at https://feedback-form.trustarc.com/watchdog/request if your complaint is not resolved by Mailchimp directly.

What you can do

→ Review the updated privacy statement to understand the new dispute resolution procedures and complaint handling mechanisms.

→ If you have a complaint about how your data is handled under the Data Privacy Framework, contact Mailchimp using the details in the 'How to contact us' section.

→ If your complaint is not resolved by Mailchimp, file a complaint with TRUSTe at https://feedback-form.trustarc.com/watchdog/request.

Key Clauses Affected

Generated by a model from the captured document; not read by a person
DPF Certification and Compliance

Intuit and Mailchimp now explicitly certify compliance with EU-U.S. DPF, UK Extension, and Swiss-U.S. DPF Principles as set forth by the U.S. Department of Commerce.

Dispute Resolution and Complaint Procedures

Added multi-tiered complaint resolution: direct contact with Mailchimp, alternative dispute resolution via TRUSTe, and binding arbitration for unresolved DPF-related complaints.

Consent for New Uses and Onward Transfers

Mailchimp commits to offer opt-out or collect opt-in consent before using personal data for materially different purposes or sharing with external parties not covered by the privacy policy.

Full clause-by-clause analysis available with Insight.
ⓘ

This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology

Evidence Verification

✓ Verified
Previous Version
5104160a107b437c0db347584f6e8f7f5ef9a06b435be31b4951bfaaba305331
July 8, 2026 00:46 UTC
✓ Verified
Current Version
7d459a6ef42be3985b353cf82297ecca2f5c80d6bc2a6ef93692553db8d7b997
July 17, 2026 00:53 UTC
✓ Verified
Change Detected
July 17, 2026 00:53 UTC
✓
Analysis Methodology
✓ Verified
Source Document
https://www.intuit.com/privacy/statement/
Record history

Wording edits to this record that do not change what it claims. Changes to a claim are published as corrections.

2026-10-11 · Feed summary edited · summary regenerated by summarize_events
Previous text
Expanded Data Privacy Framework compliance disclosures and added consent requirements for new personal data uses and external sharing.
2026-10-11 · Impact summary edited · summary regenerated by summarize_events
Previous text
The updated terms establish new procedures for handling personal data complaints related to international data transfers under the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Frameworks. Users from these jurisdictions now have access to defined complaint and dispute resolution mechanisms, including referral to TRUSTe as an alternative dispute provider at no cost, and binding arbitration under certain conditions. Additionally, the policy now requires that before personal data is used for a materially new purpose or shared with external parties not covered as processors, Mailchimp will offer users the opportunity to opt out through appropriate means or collect opt-in consent.
2026-10-11 · Summary edited · summary regenerated by summarize_events
Previous text
Intuit's privacy policy was updated on July 17, 2026 to substantially expand its Data Privacy Framework (DPF) compliance disclosures and procedures. The updated language provides detailed operational procedures for DPF Principles-related complaints, dispute resolution mechanisms, and onward transfer liability. Notably, the policy adds explicit language requiring opt-out or opt-in consent before using personal data for materially new purposes or sharing with external parties not covered as processors.
2026-10-07 · Change line edited · change line rewritten to the 2026-10-07 template: no detection date, no sentence counts
Previous text
Intuit updated their Intuit Privacy Statement on July 17, 2026. Change detected: 12 sentence(s) added, 6 sentence(s) modified. Document contained 492 sentences after update.
Citation Record
Entity: Intuit
Document: Intuit Privacy Statement
Record ID: CA-X-003770
Version: CA-V-004992
Captured: 2026-07-17 00:53:48 UTC
URL: https://conductatlas.com/change/2026-07-17-intuit-intuit-privacy-statement-3770/
Accessed: Oct. 17, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
For legal and compliance teams

Institutional Analysis

Generated by a model from the captured document; not read by a person
Assessment

Intuit has substantially expanded its Data Privacy Framework compliance disclosures, replacing generic language with specific certification statements, complaint procedures, and dispute resolution mechanisms. The change reflects updated DPF requirements and adds explicit commitments regarding onward …

🔒 Full institutional analysis

Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.

Unlock the full institutional analysis — Insight

ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-X-003770.

Full Changes

View complete diff →

Document Context

Version history → Policy drift analysis → Document page →
Document
Intuit Privacy Statement
Entity
Intuit
Captured
July 17, 2026
Source URL
https://www.intuit.com/privacy/statement/
Other changes to Intuit Privacy Statement
Next change Aug 7, 2026
Intuit revised its SMS opt-out language to clarify that the opt-out procedure applies to all marketing text messages from Intuit, …
Low Positive
View full version history →
More from Intuit
Aug 7, 2026 Low
Intuit Privacy Statement

Intuit revised its SMS opt-out language to clarify that the opt-out procedure applies to all marketing text messages from Intuit, …

Get the weekly coverage letter

Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.

Stay ahead of the changes

Track Intuit policy changes

Get alerted when this policy changes again, including what changed and why it matters.

All Intuit changes →