Old version
September 16, 2026 01:21 UTC
05f0c914e13581c16490bdb2a2c078ad4d529cabb9292872a7a52974b129382f
CA-V-006984
New version
October 2, 2026 01:20 UTC
1a9a08ef577c6b0131829f5320c2b7ed788af8f06400b8c8fb2f90be47c9dfb1
CA-V-007317
Share 𝕏 Share in Share
Change Summary
Okta updated their Okta Privacy Policy on October 02, 2026. Change detected: 16 sentence(s) modified. Document contained 374 sentences after update.
unknown severity
0 Sentences added
0 Sentences removed
16 Sentences modified
374 Sentences before
374 Sentences after
Added
Removed
Modified
BeforeAfter
26INFORMATION YOU PROVIDE TO US Based on our current practices (and including our practices over the last 12 months), we collect the following categories of information about you : Contact and Professional Data.26Information you provide to us Based on our current practices (and including our practices over the last 12 months), we collect the following categories of information about you : Contact and Professional Data .
53PERSONAL DATA WE COLLECT FROM OTHER SOURCES In the course of doing business (and over the 12 months preceding the effective date of this Privacy Policy), we receive Personal Data and other information from other third parties for our business or commercial purposes .53Personal Data We Collect From Other Sources In the course of doing business (and over the 12 months preceding the effective date of this Privacy Policy), we receive Personal Data and other information from other third parties for our business or commercial purposes .
69DEVICE DATA, USAGE DATA, ANCILLARY DATA, DIAGNOSTIC DATA, AND METADATA WE COLLECT EXPLANATION OF DEVICE DATA, USAGE DATA, ANCILLARY DATA, DIAGNOSTIC DATA, AND OTHER METADATA AND TECHNOLOGY USED Like most websites, applications, and software across the Internet, Okta collects certain Personal Data when you access and use our websites, applications, software, and products and services subject to laws applicable in your jurisdiction .69Device Data, Usage Data, Ancillary Data, Diagnostic Data, and Metadata We Collect Explanation of Device Data, Usage Data, Ancillary Data, Diagnostic Data, and Other Metadata and Technology Used Like most websites, applications, and software across the Internet, Okta collects certain Personal Data when you access and use our websites, applications, software, and products and services subject to laws applicable in your jurisdiction .
171LEGAL BASES FOR PROCESSING PERSONAL DATA (FOR UNITED KINGDOM AND EUROPEAN ECONOMIC AREA AND OTHER RELEVANT JURISDICTIONS) If you are an individual in the United Kingdom, the European Economic Area (EEA), or of another relevant jurisdiction, we collect and process information about you only where we have a legal basis or bases for doing so under applicable laws.171Legal Bases for Processing Personal Data (for United Kingdom and European Economic Area and other relevant jurisdictions) If you are an individual in the United Kingdom, the European Economic Area (EEA), or of another relevant jurisdiction, we collect and process information about you only where we have a legal basis or bases for doing so under applicable laws.
218OKTA SOCIAL MEDIA OUTLETS Okta's websites may use social media features, such as the Facebook "like" button, the Instagram "heart" button, Twitter sharing features, and other similar widgets ("Social Media Features").218Okta Social Media Outlets Okta's websites may use social media features, such as the Facebook "like" button, the Instagram "heart" button, Twitter sharing features, and other similar widgets ("Social Media Features").
224PRODUCTS AND SERVICES AVAILABLE THROUGH OTHER CHANNELS If you visit the Unity Technologies Asset Store to access an Okta product or service, as part of provisioning assets through the Asset Store, Unity Technologies will collect personal data as described in its Privacy Policy.224Products and Services Available Through Other Channels If you visit the Unity Technologies Asset Store to access an Okta product or service, as part of provisioning assets through the Asset Store, Unity Technologies will collect personal data as described in its Privacy Policy.
240OKTA'S ADHERENCE TO THE EU-U.S. DATA PRIVACY FRAMEWORK, THE UK EXTENSION TO THE EU-U.S. DATA PRIVACY FRAMEWORK, AND THE SWISS-U.S. DATA PRIVACY FRAMEWORK Okta complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.240Okta’s Adherence to the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework Okta complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.
292YOUR PRIVACY RIGHTS Depending on your jurisdiction, you may have certain rights with respect to your Personal Data that we process in our capacity as a data controller, subject to applicable law: Right to Access.292Your Privacy Rights Depending on your jurisdiction, you may have certain rights with respect to your Personal Data that we process in our capacity as a data controller, subject to applicable law: Right to Access.
321CATEGORIES OF PERSONAL DATA COLLECTED In the preceding 12 months, we have collected the following categories of Personal Data about California consumers.321Categories of Personal Data Collected In the preceding 12 months, we have collected the following categories of Personal Data about California consumers.
329BUSINESS AND COMMERCIAL PURPOSES FOR COLLECTION; DISCLOSURES FOR A BUSINESS PURPOSE We may collect all of the above categories of Personal Data to run our business and carry out our day-to-day activities, as described above in Section IV.329Business and Commercial Purposes for Collection; Disclosures for a Business Purpose We may collect all of the above categories of Personal Data to run our business and carry out our day-to-day activities, as described above in Section IV.
332CATEGORIES OF PERSONAL DATA SOLD OR SHARED FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING In the preceding 12 months, we have disclosed the above categories of Personal Data to third-party advertising partners, such as in connection with our use of tracking technologies for cross-context behavioral advertising or by providing lists of email addresses for potential customers, so that we can reach you across the web with advertisements for our products and services.332Categories of Personal Data Sold or Shared for Cross-Context Behavioral Advertising In the preceding 12 months, we have disclosed the above categories of Personal Data to third-party advertising partners, such as in connection with our use of tracking technologies for cross-context behavioral advertising or by providing lists of email addresses for potential customers, so that we can reach you across the web with advertisements for our products and services.
336CATEGORIES OF PERSONAL DATA SOLD OR SHARED FOR JOB APPLICANTS Okta has not sold or shared any Personal Data relating to job applicants, in the 12 months preceding the effective date of this Privacy Policy.336Categories of Personal Data Sold or Shared for Job Applicants Okta has not sold or shared any Personal Data relating to job applicants, in the 12 months preceding the effective date of this Privacy Policy.
337SENSITIVE PERSONAL DATA In addition to the categories of Personal Data listed above, we may collect certain categories of Sensitive Personal Data from you as that term is defined under CCPA, if you choose to provide it.337Sensitive Personal Data In addition to the categories of Personal Data listed above, we may collect certain categories of Sensitive Personal Data from you as that term is defined under CCPA, if you choose to provide it.
339CATEGORIES OF SENSITIVE PERSONAL DATA DISCLOSED In the preceding 12 months Okta has not sold or shared any Sensitive Personal Data; however, we may have disclosed your Sensitive Personal Data to service providers for business purposes as further described in Section V above and as set forth below.339Categories of Sensitive Personal Data Disclosed In the preceding 12 months Okta has not sold or shared any Sensitive Personal Data; however, we may have disclosed your Sensitive Personal Data to service providers for business purposes as further described in Section V above and as set forth below.
340BUSINESS PURPOSES FOR WHICH SENSITIVE PERSONAL DATA WILL BE USED OR DISCLOSED We may collect the categories of Sensitive Personal Data listed for processing job applications and the purposes as further described in Section IV above, and to further our legitimate business purposes as outlined under the CCPA : performing services, including maintaining or servicing accounts ; detection and prevention of security incidents ; protecting against malicious, deceptive, fraudulent or illegal actions and prosecuting those responsible ; auditing related to consumer interactions ; short-term, transient use ; quality and safety maintenance or verification ; internal research for technological development ; and debugging to identify and repair functionality .340Business Purposes For Which Sensitive Personal Data will be Used or Disclosed We may collect the categories of Sensitive Personal Data listed for processing job applications and the purposes as further described in Section IV above, and to further our legitimate business purposes as outlined under the CCPA : performing services, including maintaining or servicing accounts ; detection and prevention of security incidents ; protecting against malicious, deceptive, fraudulent or illegal actions and prosecuting those responsible ; auditing related to consumer interactions ; short-term, transient use ; quality and safety maintenance or verification ; internal research for technological development ; and debugging to identify and repair functionality .
341YOUR RIGHTS The CCPA gives you certain rights regarding the Personal Data we collect about you: Right to Know About Personal Data Collected, Disclosed, or Sold.341Your Rights The CCPA gives you certain rights regarding the Personal Data we collect about you: Right to Know About Personal Data Collected, Disclosed, or Sold.
Stay ahead of the changes

Watch this before it changes again

Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.