Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that personal information may be disclosed to third parties during negotiations for or in connection with a merger, restructuring, bankruptcy, or asset sale, including prior to any such transaction being completed.
This analysis describes what Lyft's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes disclosure of personal information during the negotiation phase of a corporate transaction, not only upon completion, which may result in personal data being accessed by a potential acquirer or transaction counterparty before any definitive agreement or regulatory approval.
Under these terms, personal information including identifiers, ride history, financial data, and location data may be disclosed to parties involved in a corporate transaction with Lyft, including during the negotiation phase. The policy does not describe what notice, if any, would be provided to users in the event of such a transaction.
Cross-platform context
See how other platforms handle Corporate Control Transfer Data Disclosure and similar clauses.
Compare across platforms →Monitoring
Lyft has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We may disclose your personal information while negotiating or in relation to a change of corporate control such as a restructuring, merger, bankruptcy, or sale of our assets.Excerpt from Lyft's Privacy Policy
1) REGULATORY LANDSCAPE: Corporate transaction data transfer provisions engage the FTC Act and applicable state privacy statutes, several of which require that consumers be notified if their data will be transferred to an entity with materially different privacy practices following a transaction. The CCPA imposes obligations on successor entities that receive personal information through asset transactions. 2) GOVERNANCE EXPOSURE: Low. Corporate transaction carve-outs are commonly included in privacy policies and are generally recognized as operational necessities. However, the inclusion of the negotiation phase as a permissible disclosure trigger, prior to transaction completion, creates a broader disclosure window than completion-only formulations. 3) JURISDICTION FLAGS: California requires that successor entities honor the privacy rights of consumers whose data was collected under the prior entity's privacy policy, or provide notice and opportunity to opt out. Other state statutes impose similar obligations. 4) CONTRACT AND VENDOR IMPLICATIONS: Due diligence data room access for potential acquirers should be governed by non-disclosure agreements that restrict use of personal information to transaction evaluation purposes. Compliance teams should confirm that data room protocols align with the policy's assertion that disclosure occurs for transaction-related purposes only. 5) COMPLIANCE CONSIDERATIONS: If a corporate transaction occurs, compliance teams should assess whether successor entity privacy practices are materially different from those described in this policy, whether user notification obligations are triggered, and whether opt-out rights must be offered to consumers in applicable jurisdictions.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision authorizes disclosure of personal information during the negotiation phase of a corporate transaction, not only upon completion, which may result in personal data being accessed by a potential acquirer or transaction counterparty before any definitive agreement or regulatory approval.
Under these terms, personal information including identifiers, ride history, financial data, and location data may be disclosed to parties involved in a corporate transaction with Lyft, including during the negotiation phase. The policy does not describe what notice, if any, would be provided to users in the event of such a transaction.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Lyft.