Ancestry authorizes sharing of user information with third-party vendors for fraud prevention, payment processing, advertising, and analytics, and permits third-party advertising companies to collect user activity data from Ancestry's services for targeted advertising purposes.
This analysis describes what Ancestry's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes two distinct data flows: sharing with service providers operating under contract and allowing third-party advertising companies to independently collect user activity data. The latter may constitute 'sharing' of personal information under the CPRA, triggering opt-out rights for California residents, and may implicate cookie consent requirements under GDPR for EU users.
The updated Privacy Statement clarifies what uses of Ancestry services are permitted and prohibited, establishes that photo face-grouping in your gallery requires your express consent, and introduces SMS messaging as a communication channel for future opt-in communications. The statement now covers Ancestry, AncestryDNA, and Related Brands under a unified framework while noting that other services operated by the company use separate privacy statements. The removal of 'uploaded DNA data' from the account creation section reflects a narrowing of that specific provision's scope, though genetic information processing remains described elsewhere in the policy. You can review the full updated statement to understand how your personal information will be processed and manage your communication preferences when SMS opt-ins become available.
View change record →California residents lose direct navigation to the CCPA-mandated 'Do Not Sell or Share My Personal Information' disclosure page from Ancestry's privacy footer. While California law requires the company to honor data sale opt-out requests, removing the link reduces visibility and accessibility of this right. California residents can locate this right by searching Ancestry's website or contacting the company directly, but the removal creates an additional barrier to exercising a legally protected option.
View change record →This expands data sharing scope to explicitly include advertising and analytics partners and allows third-party ad companies direct collection of activity data, significantly broadening monetization of user information.
View full change record →Under this clause, user activity data including browsing behavior on Ancestry's services may be accessed by third-party advertising companies for targeted advertising. California residents can opt out of this sharing through the 'Do Not Sell or Share My Personal Information' mechanism described in the policy.
How other platforms handle this
We may share your information with third-party vendors and service providers that perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance. We may also share your information with third-party advertising p...
We may share your personal information with third-party vendors and service providers that perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance. We may also share your personal information with busines...
We permit third-party service providers to collect your information, as described here, through some of our services and we share your information with third-party service providers for business purposes as described in this policy, including but not limited to providing advertising on our services ...
Monitoring
Ancestry has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We may share your information with third-party vendors and service providers that support our business, such as fraud prevention, payment processing, advertising, analytics, and other services. We may also allow third-party advertising companies to collect information about your activity on our Services for the purposes of sending you targeted advertising.— Excerpt from Ancestry's Ancestry Privacy Statement
REGULATORY LANDSCAPE: Third-party advertising data collection from Ancestry's platform may constitute 'sharing' of personal information for cross-context behavioral advertising under the CPRA, subject to opt-out rights enforced by the California Privacy Protection Agency and California Attorney General. For EU and UK users, deployment of third-party advertising trackers requires valid consent under GDPR and the ePrivacy Directive (Cookie Law). The FTC has general authority over deceptive or unfair data sharing practices. GOVERNANCE EXPOSURE: High for California and EU operations. The CPRA's definition of 'sharing' for cross-context behavioral advertising is broad and likely encompasses third-party advertising pixel and cookie collection on Ancestry's pages. Failure to implement a compliant opt-out mechanism or cookie consent banner could expose Ancestry to regulatory action. Genealogy and DNA users' data may carry heightened sensitivity in this context. JURISDICTION FLAGS: California residents have opt-out rights under the CPRA. EU and UK users require consent for non-essential tracking under GDPR and the ePrivacy Directive. Connecticut, Virginia, Colorado, and other states with comprehensive privacy laws enacted as of 2024 may impose similar opt-out obligations for targeted advertising data sharing. CONTRACT AND VENDOR IMPLICATIONS: Contracts with third-party advertising and analytics vendors should be reviewed to confirm appropriate data processing agreements are in place, that vendors are restricted from using data beyond the disclosed purposes, and that service provider versus third-party categorizations under the CPRA are accurately documented and operationalized. COMPLIANCE CONSIDERATIONS: Compliance teams should audit the technical implementation of the 'Do Not Sell or Share' opt-out to confirm it prevents downstream third-party advertising data collection, not merely direct Ancestry data disclosures. Cookie consent banners should be verified to accurately represent third-party advertising trackers deployed on Ancestry properties.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision authorizes two distinct data flows: sharing with service providers operating under contract and allowing third-party advertising companies to independently collect user activity data. The latter may constitute 'sharing' of personal information under the CPRA, triggering opt-out rights for California residents, and may implicate cookie consent requirements under GDPR for EU users.
Under this clause, user activity data including browsing behavior on Ancestry's services may be accessed by third-party advertising companies for targeted advertising. California residents can opt out of this sharing through the 'Do Not Sell or Share My Personal Information' mechanism described in the policy.
ConductAtlas has identified this type of provision across 7 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Ancestry.