Lyft · Lyft Privacy Policy · View original document ↗

Advertising Data Sharing as Potential Sale Under State Law

Medium severity Medium confidence Explicitdocumentlanguage Unique · 0 of 352 platforms
Get alerted the next time Lyft changes these terms. Get same-day alerts →
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Lyft recorded 2 documented changes in the last 30 days.
Get same-day alerts →
Monitor governance changes for Lyft Monitor emails you the same day this changes. The archive stays free.
Get same-day alerts →

Get the weekly research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.

Document Record

What it is

The policy states that while Lyft does not exchange personal information for money, sharing data with third parties for targeted advertising on and off the Lyft Platform may constitute a sale or sharing of personal information under applicable U.S. state privacy laws. Jurisdiction-specific details and opt-out mechanisms are provided through a linked supplemental disclosure.

This analysis describes what Lyft's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes that advertising-related data sharing may trigger sale or sharing obligations under multiple U.S. state privacy statutes, requiring state-specific opt-out rights for consumers in named jurisdictions. The distinction between monetary sale and advertising-related sharing is operationally significant for compliance programs in states that define sale to include non-monetary exchanges.

Interpretive note: The specific opt-out mechanisms and their adequacy under each named state statute are not described in the main policy text but deferred to linked supplemental pages not included in this document, creating uncertainty about operational completeness.

Clause Stability Stable

0
Changes
4
Months Monitored
Jul 9, 2026
First Seen
Jul 9, 2026
Last Seen

Consumer impact (what this means for users)

Under these terms, personal information including behavioral and location data may be shared with advertising partners for targeted advertising on and off the Lyft Platform, and the agreement acknowledges this may constitute a legal sale or sharing requiring opt-out rights in certain states. Consumers in the named U.S. states have access to jurisdiction-specific rights through a linked supplemental page.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Navigate to the personalized advertising settings page linked in Lyft's privacy policy and adjust your preferences to opt out of targeted advertising data sharing; for state-specific rights, access the jurisdiction-specific rights page also linked in the policy.

Cross-platform context

See how other platforms handle Advertising Data Sharing as Potential Sale Under State Law and similar clauses.

Compare across platforms →

Monitoring

Lyft has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Get Monitor Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We do not sell your personal information to third parties for money–no one can buy the personal information we collect from and about you and we do not act as a data broker. However, we may need to share your personal information with third parties to deliver relevant personalized ads to you on and off the Lyft Platform. Some of these disclosures may constitute "sharing" or the "sale" of personal information for "targeted advertising" purposes under certain local (e.g., U.S. state) privacy laws, which we describe in more detail here.

Excerpt from Lyft's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

1) REGULATORY LANDSCAPE: This provision directly engages the California Consumer Privacy Act as amended, which defines sale to include disclosure for valuable consideration including non-monetary exchange, and sharing to include disclosure for cross-context behavioral advertising. Similar definitions apply under Colorado, Connecticut, Virginia, Texas, Oregon, and other named state statutes. The FTC may also evaluate these practices under its authority over unfair or deceptive data practices. 2) GOVERNANCE EXPOSURE: High. The policy's self-acknowledgment that advertising data sharing may constitute a sale or sharing under state law creates affirmative compliance obligations including opt-out signal recognition, do-not-sell or do-not-share links, and in some states, opt-in consent for sensitive data categories. Failure to implement these mechanisms consistently across all named state frameworks creates enforcement exposure. 3) JURISDICTION FLAGS: California creates the broadest and most actively enforced compliance obligations, including universal opt-out signal recognition under California Privacy Protection Agency regulations. Colorado, Connecticut, and Virginia impose opt-out requirements. Texas, Oregon, Nebraska, and other newly named states have enacted statutes with varying effective dates and requirements. Non-U.S. jurisdictions including Canada and the UK have separate disclosure pathways referenced in the document. 4) CONTRACT AND VENDOR IMPLICATIONS: Advertising and analytics service providers receiving personal information for targeted advertising purposes must be assessed under data processing agreements to confirm their obligations align with applicable state opt-out requirements. The policy's reference to cross-contextual behavioral advertising on and off the Lyft Platform implicates third-party ad tech ecosystem partners who may independently trigger sale definitions under state law. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should audit whether opt-out mechanisms for each named state are fully operational, whether universal opt-out signals such as Global Privacy Control are honored, whether the supplemental jurisdiction-specific disclosures linked in the policy are current and complete, and whether any sensitive data categories such as precise location shared for advertising purposes require opt-in consent in applicable states.

Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Start Insight · $19.99/mo Start with Monitor · $4.99/mo

Applicable agencies

  • FTC
    The FTC has authority over consumer data sharing practices including advertising data sharing that may constitute unfair or deceptive practices under the FTC Act.
    File a complaint →
  • State AG
    State attorneys general in California, Colorado, Connecticut, Virginia, Texas, and other named states have enforcement authority over state privacy statutes governing sale and sharing of personal information for advertising.
    File a complaint →

Provision details

Document information
Document
Lyft Privacy Policy
Entity
Lyft
Document last updated
May 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-013935
Document ID
CA-D-00138
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
d2a7273d437e46ab3791b90f4101168f5a952463d1100272430f6456dbd4e89a
Analysis generated
July 9, 2026 04:20 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Lyft
Document: Lyft Privacy Policy
Record ID: CA-P-013935
Captured: 2026-07-09 04:20:42 UTC
SHA-256: d2a7273d437e46ab…
URL: https://conductatlas.com/platform/lyft/lyft-privacy-policy/provision/CA-P-013935/advertising-data-sharing-as-potential-sale-under-state-law/
Accessed: July 24, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Governance intelligence across arbitration, AI governance, data rights, indemnification, and retention
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
Start Insight · $19.99/mo Start with Monitor · $4.99/mo

Frequently Asked Questions

What does Lyft's Advertising Data Sharing as Potential Sale Under State Law clause do?

This provision establishes that advertising-related data sharing may trigger sale or sharing obligations under multiple U.S. state privacy statutes, requiring state-specific opt-out rights for consumers in named jurisdictions. The distinction between monetary sale and advertising-related sharing is operationally significant for compliance programs in states that define sale to include non-monetary exchanges.

How does this clause affect you?

Under these terms, personal information including behavioral and location data may be shared with advertising partners for targeted advertising on and off the Lyft Platform, and the agreement acknowledges this may constitute a legal sale or sharing requiring opt-out rights in certain states. Consumers in the named U.S. states have access to jurisdiction-specific rights through a linked supplemental page.

Is ConductAtlas affiliated with Lyft?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Lyft.