Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Headspace collects health and mental wellness information about you that is considered sensitive under multiple laws, including GDPR in Europe and state consumer health data laws in the US.
This analysis describes what Headspace's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Mental health data is among the most sensitive personal information and misuse or breach of this data can have serious consequences for users' employment, insurance, and personal lives.
Cross-platform context
See how other platforms handle Sensitive Health Data Collection and similar clauses.
Compare across platforms →Monitoring
Headspace has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
The collection of GDPR 'special category' health data and US state 'consumer health data' creates overlapping compliance obligations including consent requirements, data minimisation, breach notification, and consumer rights to access/deletion under GDPR, CCPA/CPRA, Washington MHMDA, Connecticut DPA, and Nevada SB 370; a DPIA may be required for EU processing.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
Mental health data is among the most sensitive personal information and misuse or breach of this data can have serious consequences for users' employment, insurance, and personal lives.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Headspace.