Get the weekly digest
Every policy change across 844 tracked documents, once a week. No account needed.
Indeed's privacy policy was updated in an update detected on July 21, 2026. The policy now explicitly lists phone number as a category of device information collected, alongside IP address, device ID, and user agent. Additionally, the legitimate interests basis for data processing was expanded to include 'improving our Sites and services' beyond the previous scope of keeping sites safe and secure. A reference to the Joint Controller Addendum was removed from the policy.
The updated policy explicitly includes phone number as a type of device information that Indeed collects. Previously, the policy described device information as limited to IP address, device ID, and user agent. Additionally, the policy now states that Indeed relies on legitimate interests not only for keeping sites safe and secure, but also for 'improving our Sites and services', which broadens the stated basis for processing personal data. These changes formalize expanded data collection categories and processing justifications under the same legal framework.
The updated terms expand the categories of device information Indeed collects by explicitly including phone numbers, and broaden the stated justification for data processing to encompass service improvement. Organizations relying on Indeed must ensure their own privacy documentation accurately reflects these expanded data collection practices and processing purposes, particularly under GDPR and similar frameworks that require clear statement of lawful basis and processing scope.
→ The updated terms will apply as written; Indeed will collect phone numbers as part of device information processing under the expanded legitimate interests basis stated in the policy.
This is the 2nd significant Data Collection Expansion change Indeed has made since ConductAtlas began monitoring.
Across all monitored documents, Indeed has made 4 significant changes.
3 of Indeed's significant changes have been classified as negative for consumers.
Phone number is now explicitly listed as a category of device information collected alongside IP address, device ID, and user agent.
Expanded to include 'improving our Sites and services' in addition to the previous scope of keeping sites safe and secure.
Reference to Joint Controller Addendum was removed from the policy without replacement language describing controller roles.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Indeed's stated reason for processing personal data now includes product improvement, not just security, which may require data controllers to reassess whether this expanded purpose aligns with their own lawful basis under GDPR or similar frameworks.
Indeed expanded its stated data collection categories to explicitly include phone numbers and broadened its legitimate interests basis to encompass service improvement. Under GDPR Article 6(1)(f) and similar privacy frameworks, legitimate interests claims require documented balancing tests between the organization's interests and data subject rights. The explicit inclusion of phone number collection may trigger enhanced privacy notice obligations in certain jurisdictions. Organizations relying on this platform should evaluate whether these changes affect their own privacy notices, vendor assessment processes, or data processing documentation. No enforcement action is indicated; however, data controllers using Indeed may need to update their Records of Processing Activities (ROPA) or vendor contracts to reflect the expanded data categories and processing purposes.
Full institutional analysis
Regulatory exposure, obligation analysis, escalation trigger, board language, and recommended action.
Analyst $49/moConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003861.
Indeed's privacy policy was updated on July 20, 2026, with three operational changes. First, phone number is now listed as …
Indeed removed a sentence from its Terms of Service specifying that applications sent through the 'Apply For Me' tool could …
Indeed modified its terms governing AI-assisted job application drafting. Previously, the platform described drafting application content for users with an …
Get alerted when this policy changes again — including what changed and why it matters.