The notice authorizes sharing of user data, including browsing activity and identifiers collected via cookies and web beacons, with named third-party advertising and analytics providers including Adobe, Google, and Marketo for the purpose of delivering targeted advertising.
This analysis describes what AWS's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a data sharing arrangement with identified third-party advertising and analytics partners that may involve transfer of personal data outside the direct AWS data controller relationship. Under GDPR, such arrangements require either data processing agreements or, where the third party acts as an independent controller, appropriate legal bases for the transfer. Under CCPA, this sharing may constitute a sale of personal information depending on the nature of the data exchanged and the relationship with each partner.
Interpretive note: Whether the sharing with named advertising partners constitutes a 'sale' under CCPA depends on the specific commercial arrangements and value exchanges involved, which are not detailed in the notice.
Under this provision, browsing activity, device identifiers, and behavioral data collected during use of the AWS website may be shared with Adobe, Google, and Marketo for targeted advertising purposes. Users who wish to limit this sharing may do so through cookie preference controls available on the AWS website.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
We may display advertisements on our Services and those advertisements may be targeted to your interests based on your personal information. We may share your personal information with advertising partners for interest-based advertising purposes. You may opt out of interest-based advertising by visi...
Monitoring
AWS has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We use third-party analytics and advertising services, such as those offered by Adobe, Google, and Marketo. These third parties may use cookies, web beacons, and similar technologies to collect information about your use of our websites and other websites in order to provide you with targeted advertising based on your interests.— Excerpt from AWS's AWS Privacy Notice
1. REGULATORY LANDSCAPE: GDPR Articles 26 and 28 are relevant where third-party partners act as joint controllers or processors; independent controller arrangements may require separate legal basis analysis. CCPA's definition of 'sale' and 'sharing' of personal information is directly relevant, particularly following the CPRA amendments. The FTC has indicated interest in the transparency of data broker and advertising data flows. Named partners Adobe, Google, and Marketo maintain their own privacy frameworks, which interact with AWS's disclosed sharing practices. 2. GOVERNANCE EXPOSURE: Medium. The identification of specific named third-party advertising partners is a positive transparency practice, but the notice does not specify the contractual framework governing each relationship. Compliance exposure arises if these relationships have not been classified as sale or sharing under CCPA and appropriate opt-out mechanisms have not been implemented. 3. JURISDICTION FLAGS: California residents have a statutory right under CCPA to opt out of the sale or sharing of personal information for cross-context behavioral advertising. EU/EEA residents require a valid legal basis, typically consent, for processing of personal data for advertising profiling. Illinois and other US states with active privacy legislation may impose similar requirements. 4. CONTRACT AND VENDOR IMPLICATIONS: Procurement and legal teams should confirm that data processing agreements exist with Adobe, Google, and Marketo governing the scope and purpose of data shared. Where these partners act as independent controllers, joint controller agreements or equivalent arrangements may be required under GDPR. 5. COMPLIANCE CONSIDERATIONS: The compliance team should audit whether opt-out mechanisms for advertising data sharing are technically functional and jurisdictionally appropriate. CCPA-required opt-out links and GDPR consent banners should be reviewed to confirm they cover the sharing with the named partners described in this provision.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes a data sharing arrangement with identified third-party advertising and analytics partners that may involve transfer of personal data outside the direct AWS data controller relationship. Under GDPR, such arrangements require either data processing agreements or, where the third party acts as an independent controller, appropriate legal bases for the transfer. Under CCPA, this sharing may constitute a …
Under this provision, browsing activity, device identifiers, and behavioral data collected during use of the AWS website may be shared with Adobe, Google, and Marketo for targeted advertising purposes. Users who wish to limit this sharing may do so through cookie preference controls available on the AWS website.
ConductAtlas has identified this type of provision across 25 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by AWS.