Headspace · Headspace Privacy Policy · View original document ↗

Collection of Sensitive Mental Health Data

High severity Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Headspace Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what Headspace's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The provision establishes the regulatory framework governing sensitive health information collected through Headspace's mental health services. By designating Care Providers as HIPAA covered entities and Headspace as their business associate, the clause creates specific compliance obligations regarding the collection, use, and disclosure of protected health information under federal health privacy law.

Consumer impact (what this means for users)

Users of Headspace's mental health services are provided the protections and requirements established under HIPAA, including requirements around the use and disclosure of their health information by Care Providers and Headspace as a business associate. The terms authorize collection of personal information through the products and services that is subject to HIPAA's regulatory framework for covered entities and their business associates.

How other platforms handle this

Roblox Medium

Your use of the Services is also governed by our Privacy Policy, which is incorporated into these Terms by reference. By using the Services, you consent to the data collection and use practices described in the Privacy Policy. Roblox collects information you provide directly, information collected a...

Best Buy Medium

We collect information about you in a variety of ways depending on how you interact with us and our products and services. This includes information you provide directly, information we collect automatically when you use our services, and information we receive from third parties. We may collect ide...

Tabnine Medium

Tabnine may collect and use technical data and related information, including but not limited to technical information about your device, system and application software, and usage data regarding your use of the Services (including code completion statistics and plugin interaction data), to facilita...

See all platforms with this clause type →

Monitoring

Headspace has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Headspace may deliver coaching services, psychotherapy services (i.e. therapy), and psychiatry services (collectively the 'Services') using the Products or via other delivery methods, as applicable. This Privacy Policy covers the 'personal information,' meaning information about an identified or identifiable individual that is collected through our Product or Services. Our Services are delivered by our Care Providers. For Care Providers in the US, they are classified as covered entities under the Health Insurance Portability and Accountability Act ('HIPAA'). Headspace is subject to HIPAA as our Care Providers' business associate.

— Excerpt from Headspace's Headspace Privacy Policy

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
HIPAA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Headspace Privacy Policy
Entity
Headspace
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 10, 2026
Record ID
CA-P-001133
Document ID
CA-D-00216
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
c1c69938a2255531d9160216a80441cc6e236ee7a78005f747b818b71812b907
Analysis generated
May 8, 2026 10:00 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Headspace
Document: Headspace Privacy Policy
Record ID: CA-P-001133
Captured: 2026-05-08 10:00:58 UTC
SHA-256: c1c69938a2255531…
URL: https://conductatlas.com/platform/headspace/headspace-privacy-policy/collection-of-sensitive-mental-health-data/
Accessed: May 20, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Headspace's Collection of Sensitive Mental Health Data clause do?

The provision establishes the regulatory framework governing sensitive health information collected through Headspace's mental health services. By designating Care Providers as HIPAA covered entities and Headspace as their business associate, the clause creates specific compliance obligations regarding the collection, use, and disclosure of protected health information under federal health privacy law.

How does this clause affect you?

Users of Headspace's mental health services are provided the protections and requirements established under HIPAA, including requirements around the use and disclosure of their health information by Care Providers and Headspace as a business associate. The terms authorize collection of personal information through the products and services that is subject to HIPAA's regulatory framework for covered entities and their business …

Is ConductAtlas affiliated with Headspace?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Headspace.