The policy prohibits using generative AI to process personal data or biometric information without obtaining legally required consent, framing this as a violation of others' rights.
This analysis describes what Google Gemini's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision places user-side responsibility for ensuring legally required consent when using personal or biometric data as inputs to generative AI, engaging GDPR, CCPA, and state biometric privacy statutes such as Illinois BIPA.
Interpretive note: The applicable consent standard is deferred to applicable law, meaning compliance requirements vary significantly by jurisdiction and the specific category of data involved.
Under this clause, users who provide personal data or biometric information to Google's generative AI tools must ensure they hold legally required consent from the individuals whose data is used. The agreement frames non-compliance as a rights violation subject to policy enforcement.
Cross-platform context
See how other platforms handle Biometric and Personal Data Without Legally-Required Consent and similar clauses.
Compare across platforms →"Violates the rights of others, including privacy and intellectual property rights -- for example, using personal data or biometrics without legally-required consent.Excerpt from Google Gemini's Google Generative AI Prohibited Use Policy
1) REGULATORY LANDSCAPE: This provision directly engages GDPR consent requirements for processing personal data and special category data including biometrics, CCPA provisions governing the use of consumers' personal information, and Illinois BIPA, which imposes specific …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision places user-side responsibility for ensuring legally required consent when using personal or biometric data as inputs to generative AI, engaging GDPR, CCPA, and state biometric privacy statutes such as Illinois BIPA.
Under this clause, users who provide personal data or biometric information to Google's generative AI tools must ensure they hold legally required consent from the individuals whose data is used. The agreement frames non-compliance as a rights violation subject to policy enforcement.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Google Gemini.