Comcast · Comcast Terms of Service · View original document ↗

Customer Proprietary Network Information (CPNI) and Data Collection

Medium severity Medium confidence Explicitdocumentlanguage Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Comcast Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Comcast collects data about how you use its services, what equipment you have, and how your network performs, and uses that information for service delivery, network management, and marketing.

This analysis describes what Comcast's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Your service usage patterns, device information, and network data are collected and can be used for internal marketing purposes in addition to service delivery, which means your data informs how Comcast targets you with offers and upgrades.

Interpretive note: The full scope of data collection and use is governed by the Privacy Policy incorporated by reference, which is a separate document; the agreement text alone does not define all data categories or all permitted uses.

Recent Activity

This document changed recently

Medium Jul 2, 2026

The updated terms now explicitly prohibit the deployment of AI Agents to access, use, interact with, or take action on Comcast services unless Comcast expressly grants permission. This includes automated activities such as obtaining information, making requests, monitoring activity, copying, downloading, scraping, or data mining the services. The agreement also prohibits AI Agents from accepting terms on a user's behalf or engaging in support or sales interactions. Users who currently use automation tools or third-party integrations with Comcast services may need to seek express permission from Comcast or discontinue such automated access.

View change record →

Clause Stability Mostly Stable

1
Change
3
Months Monitored
May 10, 2026
First Seen
May 22, 2026
Last Seen
This clause type exists across 3350 other provisions on other platforms.
This clause has changed once in 3 months of monitoring.

Change history

added Jul 2, 2026

This new provision explicitly details Comcast's broad data collection practices and grants rights to use customer information for marketing, replacing the previous version's more generic Privacy Policy incorporation.

View full change record →

Consumer impact (what this means for users)

Subscribers' service usage data, equipment information, and network performance data are collected and used for marketing as well as service improvement purposes; the Privacy Policy governs the full scope of data use and subscribers should review it to understand opt-out rights for marketing use of this data.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Visit the Xfinity privacy preference center to review and adjust your data and marketing communication preferences, including CPNI opt-out options for marketing use of your service data.

How other platforms handle this

Ledger Medium

At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.

Strava Medium

If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes; we do not disclose it to third parties without your prior consent; and we will only use it for the specific purposes described in this Policy.

eBay Medium

We collect your personal data when you use our Services, create a new eBay account, provide us with information via a web form, add or update information in your eBay account, participate in online community discussions or otherwise interact with us.

See all platforms with this clause type →

Monitoring

Comcast has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Comcast collects information about your use of the Services, including the types of Services you purchase, how you use them, and information about your equipment and network performance. Comcast may use this information to provide and improve the Services, send you marketing communications about Comcast products and services, and as otherwise described in Comcast's Privacy Policy, which is incorporated into this Agreement by reference.

— Excerpt from Comcast's Comcast Terms of Service

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: CPNI is specifically regulated under Section 222 of the Communications Act, enforced by the FCC, which imposes limits on how telecommunications carriers can use, disclose, and protect customer proprietary network information without customer approval. The incorporated Privacy Policy engages the CCPA for California residents, requiring disclosure of data categories collected, purposes of use, and providing rights to access, delete, and opt out of sale or sharing of personal information. The FTC Act applies to any deceptive representations about data practices. GOVERNANCE EXPOSURE: Medium. The incorporation of the Privacy Policy by reference means the full scope of data collection and use obligations is determined by a separate document that can be updated independently. Compliance teams must track both documents. The use of CPNI for marketing purposes is subject to FCC opt-out requirements, and Comcast's marketing use of usage data must comply with the specific consent and opt-out mechanisms required under Section 222. JURISDICTION FLAGS: California residents have enhanced rights under the CCPA, including the right to know what data is collected, the right to delete, and the right to opt out of the sale or sharing of personal information for cross-context behavioral advertising. Colorado, Virginia, Connecticut, and other states with comprehensive privacy laws may impose similar requirements. The agreement's incorporation of the Privacy Policy by reference means subscribers must independently locate and review that document to understand the full scope of their data rights. CONTRACT AND VENDOR IMPLICATIONS: Organizations managing employee Comcast residential accounts should assess whether any CPNI collected through business-adjacent use (e.g., home office internet) could create additional data governance obligations. Vendor assessments should confirm that Comcast's data handling practices for CPNI comply with FCC requirements and applicable state privacy laws. COMPLIANCE CONSIDERATIONS: Legal teams should verify that the Privacy Policy incorporated by reference is current, accessible, and complies with CCPA, FCC CPNI rules, and other applicable state privacy laws. Data mapping exercises should include CPNI and service usage data categories. Consumer opt-out mechanisms for marketing use of usage data should be audited for accessibility and efficacy.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has enforcement authority over deceptive data collection and use practices in consumer service agreements under the FTC Act
    File a complaint →
  • State AG
    State attorneys general enforce CCPA and other state privacy laws governing the collection and use of residential subscriber data
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Colorado AI Act
US-CO
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
TCPA
United States Federal
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
Comcast Terms of Service
Entity
Comcast
Document last updated
May 5, 2026
Tracking information
First tracked
April 28, 2026
Last verified
May 10, 2026
Record ID
CA-P-007974
Document ID
CA-D-00343
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
efea3823a102772db3d7d7ea6f90d396e449c64d5193126cb9ae725fe616faba
Analysis generated
April 28, 2026 06:09 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Comcast
Document: Comcast Terms of Service
Record ID: CA-P-007974
Captured: 2026-04-28 06:09:54 UTC
SHA-256: efea3823a102772d…
URL: https://conductatlas.com/platform/comcast/comcast-terms-of-service/customer-proprietary-network-information-cpni-and-data-collection/
Accessed: July 4, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Comcast's Customer Proprietary Network Information (CPNI) and Data Collection clause do?

Your service usage patterns, device information, and network data are collected and can be used for internal marketing purposes in addition to service delivery, which means your data informs how Comcast targets you with offers and upgrades.

How does this clause affect you?

Subscribers' service usage data, equipment information, and network performance data are collected and used for marketing as well as service improvement purposes; the Privacy Policy governs the full scope of data use and subscribers should review it to understand opt-out rights for marketing use of this data.

Is ConductAtlas affiliated with Comcast?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Comcast.