Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
This analysis describes what Google's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated Privacy Policy now explicitly discloses how Google handles data under U.S. state privacy laws, particularly California's CCPA. Google states that it does not sell personal information and does not share it as that term is defined under the CCPA. The policy details user rights to access information, request deletion, correct information, and opt out of certain profiling and targeted advertising. Users can exercise these rights through tools like My Activity and My Ad Center, or by contacting Google directly. The policy also provides specific handling of health data under Washington's My Health My Data Act and Nevada Senate Bill 370, where Google processes such information only with user consent or as otherwise permitted by law.
View change record →The updated policy makes several material clarifications about how Google links your activity across websites and apps. It shifts from describing analytics tools in isolation to framing them as part of a broader 'ad and analytics services' ecosystem, and broadens the scope of data linking to explicitly include 'cookies and other technologies'. The policy also clarifies that data sharing occurs even in private browsing modes. Review your Google Account activity controls to understand what data is being collected and linked across services you use.
View change record →How other platforms handle this
Discord commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner's Office (ICO) and the Swiss Federal Data Protection and Information Commissioner...
For any complaint that we cannot resolve directly Notion Labs, Inc. commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs)...
the data controller responsible for Service Data we collect for Google Workspace and Google Workspace for Education is Google LLC, and the data controller responsible for Service Data we collect for Google Cloud Platform is Cloud Brasil Computação e Serviços de Dados Ltda.
Monitoring
Google has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"We work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of your data that we cannot resolve with you directly.Excerpt from Google's Privacy Policy
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
The clause states: “We work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of your data that we cannot resolve with you directly.”
ConductAtlas has identified this type of provision across 267 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Google.