10 Total
7 High severity
3 Medium severity
0 Low severity
Summary

This is Xfinity's Privacy Policy, which explains what personal information they collect about you when you use their internet, TV, phone, or mobile services, and how they use and share it. Comcast collects a wide range of data including your viewing habits, network usage, location, and account information, which may be used for targeted advertising and shared with affiliated companies like NBC Universal. You have rights to access your data and limit certain uses, and residents of many states have additional legal protections.

Technical Summary

This document is Xfinity's (Comcast's) comprehensive Privacy Policy, effective November 17, 2025, governing the collection, use, maintenance, protection, and disclosure of personal information across all Xfinity-branded, Comcast-branded, and Xumo-branded services, including internet, TV, voice, mobile, and home security products. The policy establishes Comcast's data collection practices spanning account information, network usage, viewing habits, location data, and information from third parties, and outlines how this data is used for service delivery, marketing, and targeted advertising. Key obligations include disclosure of third-party data sharing with affiliates (including NBCU and Sky), advertising partners, and government entities; consumer rights to access, correct, and restrict use of personal information; and specific state-law notice provisions for California, Colorado, Connecticut, Maine, Washington, and over a dozen other states. Notable provisions include the Cable Act protections for cable subscriber data, opt-out rights for marketing and targeted advertising, and supplemental notices for EEA, Switzerland, and UK residents.

Institutional Analysis

This policy engages multiple regulatory frameworks including the Cable Communications Policy Act (47 U.S.C. § 551), CPNI rules under the Communications Act, CCPA/CPRA, and state-level comprehensive p…

This policy engages multiple regulatory frameworks including the Cable Communications Policy Act (47 U.S.C. § 551), CPNI rules under the Communications Act, CCPA/CPRA, and state-level comprehensive privacy laws in Colorado, Connecticut, Virginia, Texas, Oregon, and others, as well as GDPR and UK GD…

🔒

Compliance intelligence locked

Regulatory exposure, material risk, and due diligence action items.

Evidence Provenance
Captured March 19, 2026 15:14 UTC
Document ID CA-D-000344
Version ID CA-V-000213
Wayback Machine View archived versions →
SHA-256 c8033c1eea1555714524e778145559b53d96f6342cba9e61f88a30badab5b915
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Change Timeline
High Severity — 7 provisions
Medium Severity — 3 provisions