10 Total
6 High severity
3 Medium severity
1 Low severity
Summary

This is LinkedIn's privacy policy, which explains what personal data LinkedIn collects about you — including your professional history, location, device identifiers, messages, and behavioral data — and how it uses and shares that data with advertisers, Microsoft, and other third parties. The most important thing to know is that LinkedIn uses your personal data, including your content and activity, to train its AI and generative AI models, and you must actively opt out of this in your account settings to prevent it. You can limit how LinkedIn uses your data for AI training and targeted advertising by visiting your Privacy Settings at linkedin.com/psettings/privacy.

Technical Summary

This document is LinkedIn's Privacy Policy (effective November 3, 2025), governing the collection, use, and sharing of personal data for all Members and Visitors to LinkedIn's services, with LinkedIn Ireland Unlimited Company serving as data controller for EU/EEA/Switzerland/UK users and LinkedIn Corporation for all other users. The policy creates significant obligations for LinkedIn to provide transparency and user controls over data collection spanning profile data, behavioral tracking, inferred characteristics, communications content, and third-party sourced data, while users implicitly consent to the updated policy through continued use of the platform. Notable provisions include explicit authorization to use member data for AI/generative AI model training, broad collection of inferred data about users (such as salary estimates and job preferences derived without direct input), and sharing of personal data with affiliated entities including Microsoft and an extensive network of third-party partners and advertisers. The policy engages GDPR (EU Regulation 2016/679), CCPA/CPRA (Cal. Civil Code §1798.100 et seq.), UK GDPR, and applicable U.S. state privacy laws, with the FTC having primary enforcement authority in the U.S. and the Irish Data Protection Commission (DPC) serving as lead supervisory authority for EU/EEA processing; material compliance considerations include the adequacy of consent mechanisms for AI training data use, cross-border data transfer safeguards, and the breadth of legitimate interests claims used to justify processing activities.

Evidence Provenance
Captured April 19, 2026 06:06 UTC
Document ID CA-D-000090
Version ID CA-V-000672
Wayback Machine View archived versions →
SHA-256 55fa0b073e1c9bf6f1e23dc853a1ac7921b89e2670912d492cbfc37696343afc
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Institutional Analysis

🔒 Institutional analysis locked

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Upgrade to Professional — $149/mo
Change Timeline
View full version history (0 captures) →
High Severity — 6 provisions
Medium Severity — 3 provisions
Low Severity — 1 provision

Cross-platform context

See how other platforms handle AI and Generative AI Model Training and similar clauses.

Compare across platforms →

Applicable Regulations

EU AI Act
European Union
BIPA
Illinois, USA
CCPA/CPRA
California, USA
CFAA
United States Federal
CAN-SPAM
United States Federal
DMA
European Union
DMCA
United States Federal
DSA
European Union
GDPR
European Union
UK GDPR
United Kingdom