The policy establishes that data subject rights requests must be submitted by email with government-issued identity documentation and proof of address, and states that Boston Dynamics is not obligated to fulfill access or portability requests where identity cannot be verified.
This analysis describes what Boston Dynamics's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision requires individuals to submit copies of government-issued identification and proof of address to exercise access or deletion rights, a verification threshold that compliance teams should assess against applicable GDPR and CCPA requirements for identity verification proportionality.
Interpretive note: Whether the specified verification requirements are proportionate under GDPR or CCPA depends on regulatory interpretation and the specific data categories involved.
This provision establishes that exercising data access, correction, deletion, or portability rights requires submitting identifying documentation including a copy of a government-issued ID and a recent utility or credit card bill to privacy@bostondynamics.com. The agreement states that requests cannot be fulfilled if identity verification is unsuccessful.
Cross-platform context
See how other platforms handle Data Subject Rights and Verification Requirements and similar clauses.
Compare across platforms →"To exercise these rights, please email us at privacy@bostondynamics.com. You will need to provide us with: enough information to identify you (e.g., your full name, address and customer or matter reference number); proof of your identity and address (e.g., a copy of your driver's license or passport and a recent utility or credit card bill); and a description of what right you want to exercise and the information to which your request relates. We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person's behalf.Excerpt from Boston Dynamics's Privacy Policy
1) REGULATORY LANDSCAPE: GDPR and CCPA both require that identity verification for data subject requests be proportionate and not create excessive barriers to rights exercise.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision requires individuals to submit copies of government-issued identification and proof of address to exercise access or deletion rights, a verification threshold that compliance teams should assess against applicable GDPR and CCPA requirements for identity verification proportionality.
This provision establishes that exercising data access, correction, deletion, or portability rights requires submitting identifying documentation including a copy of a government-issued ID and a recent utility or credit card bill to privacy@bostondynamics.com. The agreement states that requests cannot be fulfilled if identity verification is unsuccessful.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Boston Dynamics.