Klarna · Klarna Privacy Policy · View original document ↗

GLBA Opt-Out for Non-Public Personal Information Sharing

Medium severity Medium confidence Explicitdocumentlanguage Unique · 0 of 352 platforms
Get alerted the next time Klarna changes these terms. Get same-day alerts →
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Klarna Monitor emails you the same day this changes. The archive stays free.
Get same-day alerts →

Get the weekly research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.

Document Record

What it is

The document provides a GLBA-based opt-out mechanism allowing users to limit Klarna's sharing of non-public personal information with unaffiliated third parties, accessible through the Klarna app or at app.klarna.com under Settings then Privacy.

This analysis describes what Klarna's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision operationalizes Klarna's GLBA opt-out obligation as a financial institution, allowing US consumers to limit sharing of NPI with unaffiliated third parties through in-app or web-based settings without requiring physical mail or phone contact.

Interpretive note: The document does not specify which categories of NPI or which unaffiliated third parties are covered by the opt-out, nor whether any GLBA sharing exceptions apply, creating interpretive uncertainty about the full scope of the opt-out mechanism.

Clause Stability Stable

0
Changes
4
Months Monitored
Jul 9, 2026
First Seen
Jul 9, 2026
Last Seen

Consumer impact (what this means for users)

This provision establishes an in-app and web-accessible opt-out mechanism for limiting sharing of non-public personal information with unaffiliated third parties under GLBA. The document does not specify which categories of NPI or which unaffiliated third parties are covered by the opt-out, meaning the full scope requires review of Klarna's GLBA privacy notice.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Sign in to the Klarna app, go to Settings, then select Privacy to adjust your data sharing preferences. If using the web, log in at app.klarna.com and follow the same path.

Cross-platform context

See how other platforms handle GLBA Opt-Out for Non-Public Personal Information Sharing and similar clauses.

Compare across platforms →

Monitoring

Klarna has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Get Monitor Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
You may opt out of certain types of sharing under GLBA; to limit our sharing of non-public personal information with unaffiliated third parties under Gramm-Leech-Bliley Act simply go to the Klarna app: sign in to the Klarna App, go to Settings, then "Privacy" to adjust your settings. If you don't have the Klarna App, you can go to the WebApp at app.klarna.com, then log-in, click ''Settings'', then "Privacy" to adjust your settings.

Excerpt from Klarna's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

1) REGULATORY LANDSCAPE: GLBA requires financial institutions to provide consumers an opt-out right before sharing NPI with unaffiliated third parties and to deliver an annual privacy notice describing sharing practices. The CFPB is the primary federal enforcement authority for GLBA compliance for entities such as Klarna. The provision does not specify whether all categories of NPI sharing are covered by the opt-out or whether certain sharing is exempt under GLBA's joint marketing or service provider exceptions. 2) GOVERNANCE EXPOSURE: Medium. The opt-out mechanism is provided, but the document does not specify the categories of NPI subject to the opt-out or identify the unaffiliated third parties covered, which may create disclosure gaps relative to GLBA's notice requirements. Compliance teams should verify that the mechanism covers all required sharing categories. 3) JURISDICTION FLAGS: This provision is expressly US-focused given the GLBA citation. EU and UK users have separate rights under GDPR and UK GDPR that are not addressed by this mechanism. California residents are directed to a separate California Privacy Page. 4) CONTRACT AND VENDOR IMPLICATIONS: Financial institution partners and vendors integrating Klarna should verify that their own GLBA privacy notices are consistent with Klarna's disclosed sharing practices and that opt-out elections made by shared customers are honored across integrated systems. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that Klarna's full GLBA privacy notice is delivered with the required frequency, identifies all unaffiliated third-party sharing categories, and that the in-app opt-out mechanism accurately captures and processes consumer elections in a timely manner.

Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Start Professional · $99/mo Start with Monitor · $29/mo

Applicable agencies

  • CFPB
    The CFPB is the primary federal enforcement authority for GLBA privacy notice and opt-out requirements applicable to financial institutions such as Klarna.
    File a complaint →

Provision details

Document information
Document
Klarna Privacy Policy
Entity
Klarna
Document last updated
May 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-015780
Document ID
CA-D-00166
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
bcce34759d8a1dc9b39569aaea9df97b2c0ca95af1f85454a872e7bb2416076c
Analysis generated
July 9, 2026 08:48 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Klarna
Document: Klarna Privacy Policy
Record ID: CA-P-015780
Captured: 2026-07-09 08:48:05 UTC
SHA-256: bcce34759d8a1dc9…
URL: https://conductatlas.com/platform/klarna/klarna-privacy-policy/provision/CA-P-015780/glba-opt-out-for-non-public-personal-information-sharing/
Accessed: July 24, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Governance intelligence across arbitration, AI governance, data rights, indemnification, and retention
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
Start Professional · $99/mo Start with Monitor · $29/mo

Frequently Asked Questions

What does Klarna's GLBA Opt-Out for Non-Public Personal Information Sharing clause do?

This provision operationalizes Klarna's GLBA opt-out obligation as a financial institution, allowing US consumers to limit sharing of NPI with unaffiliated third parties through in-app or web-based settings without requiring physical mail or phone contact.

How does this clause affect you?

This provision establishes an in-app and web-accessible opt-out mechanism for limiting sharing of non-public personal information with unaffiliated third parties under GLBA. The document does not specify which categories of NPI or which unaffiliated third parties are covered by the opt-out, meaning the full scope requires review of Klarna's GLBA privacy notice.

Is ConductAtlas affiliated with Klarna?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Klarna.