Indeed's privacy policy was updated on July 20, 2026, with three operational changes. First, phone number is now listed as a category of device information the platform collects. Second, the legitimate interests basis for data processing was expanded to explicitly include improving Indeed's sites and services, beyond the previous focus on site security and valid service provision. Third, references to the Joint Controller Addendum and email contact URL were removed or updated.
Consumers: The policy now discloses that Indeed collects phone numbers along with other device identifiers.
Consumers: Indeed's stated legal justification for processing data was broadened to allow service improvement in addition to security.
Consumers: The policy no longer explicitly references a separate Joint Controller Addendum document.
The updated policy now explicitly states that phone numbers are collected as part of device information, in addition to IP addresses and user agent data. The legal basis for collecting and processing user data was also expanded to include improving Indeed's sites and services, beyond the prior focus on site security and service validity. These changes broaden the scope of personal information collected and the purposes for which Indeed may use that information under its stated legitimate interests framework.
Across all monitored documents, Indeed has made 3 significant changes.
2 of Indeed's significant changes have been classified as negative for consumers.
Phone number was added to the list of device information collected alongside IP address and user agent.
Processing justification expanded to include improving Indeed's sites and services in addition to site security and service validity.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Indeed expanded its privacy policy to explicitly include phone number collection and broadened the stated legitimate interests basis for data processing. This change may create documentation obligations for organizations that have vendor data processing agreements …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003860.
Indeed expanded its data processing and sharing practices in an update detected on August 13, 2026. The policy previously stated …
Indeed revised its privacy policy in an update detected on August 13, 2026 to expand the categories of personal data …
Indeed modified its password security requirements for user accounts in an update detected on August 13, 2026. The previous requirement …
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.