Intuit states it collects biometric personal information through certain parts of its platform, and the policy requires that notice be provided and consent obtained before collection, with detailed practices disclosed in a separate Biometric Notice.
This analysis describes what Intuit's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses biometric information collection across parts of the Intuit Platform, subject to a notice-and-consent requirement and a separate Biometric Notice. Legal teams should assess compliance with Illinois BIPA, Texas CUBI, Washington's biometric law, and other state biometric statutes, which impose specific retention schedules, destruction requirements, and written release requirements beyond general consent.
Interpretive note: The Biometric Notice is referenced but not included in the document text provided, so the specific biometric data types, retention schedules, and destruction timelines cannot be assessed from this document alone.
The updated terms establish new procedures for handling personal data complaints related to international data transfers under the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Frameworks. Users from these jurisdictions now have access to defined complaint and dispute resolution mechanisms, including referral to TRUSTe as an alternative dispute provider at no cost, and binding arbitration under certain conditions. Additionally, the policy now requires that before personal data is used for a materially new purpose or shared with external parties not covered as processors, Mailchimp will offer users the opportunity to opt out through appropriate means or collect opt-in consent.
View change record →Introduces collection of biometric data (fingerprints, facial recognition, etc.) across Intuit products, a new sensitive data category with heightened regulatory implications.
View full change record →Under this provision, Intuit collects biometric information from users of certain platform features, conditioned on prior notice and consent. The specific types of biometric information collected, retention periods, and destruction schedules are disclosed in a separate Biometric Notice referenced but not reproduced in this document.
Cross-platform context
See how other platforms handle Biometric Information Collection and similar clauses.
Compare across platforms →"Certain parts of the Intuit Platform make use of biometric personal information (" Biometric Information "). We will not collect your Biometric Information without first providing notice and obtaining your consent. For more details about how we use Biometric Information, please see our Biometric Notice.Excerpt from Intuit's Privacy Statement
(1) REGULATORY LANDSCAPE: This provision directly engages Illinois BIPA, which imposes strict requirements including written informed consent, public retention schedules, destruction timelines, and a private right of action with statutory damages.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision discloses biometric information collection across parts of the Intuit Platform, subject to a notice-and-consent requirement and a separate Biometric Notice. Legal teams should assess compliance with Illinois BIPA, Texas CUBI, Washington's biometric law, and other state biometric statutes, which impose specific retention schedules, destruction requirements, and written release requirements beyond general consent.
Under this provision, Intuit collects biometric information from users of certain platform features, conditioned on prior notice and consent. The specific types of biometric information collected, retention periods, and destruction schedules are disclosed in a separate Biometric Notice referenced but not reproduced in this document.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Intuit.