Marqeta · Marqeta Privacy Policy · View original document ↗

CCPA Sale or Sharing of Personal Information

Medium severity High confidence Explicitdocumentlanguage Unique · 0 of 352 platforms
Get alerted the next time Marqeta changes these terms. Get same-day alerts →
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Marqeta Monitor emails you the same day this changes. The archive stays free.
Get same-day alerts →

Get the weekly research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.

Document Record

What it is

The document states that personal information including identifiers, internet and network data, and inferences derived from website interactions may be disclosed to social media, advertising, and analytics providers in a manner the policy characterizes as potentially qualifying as a CCPA sale or sharing for cross-context behavioral advertising. California residents can opt out of these disclosures.

This analysis describes what Marqeta's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision requires Marqeta to maintain a compliant CCPA opt-out mechanism for California residents and to honor Global Privacy Control signals as an opt-out preference signal, with the California Privacy Protection Agency as a relevant enforcement authority. The provision applies specifically to website-derived data and not to Marqeta's payment processing or card program management services, which are governed separately.

Consumer impact (what this means for users)

Under this provision, California residents' identifiers, browsing activity, and behavioral inferences collected from Marqeta's websites may be disclosed to advertising and analytics partners, with opt-out available via Global Privacy Control browser signals, the Digital Advertising Alliance or Network Advertising Initiative opt-out tools, or the Cookie Settings link on Marqeta's website.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Enable a Global Privacy Control-compliant signal in your browser, then visit Marqeta's website. Alternatively, visit the Digital Advertising Alliance at aboutads.info or the Network Advertising Initiative website to opt out of interest-based advertising. You may also use the Cookie Settings link on Marqeta's website to disable advertising cookies.

Cross-platform context

See how other platforms handle CCPA Sale or Sharing of Personal Information and similar clauses.

Compare across platforms →

Monitoring

Marqeta has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Get Monitor Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Marqeta may disclose personal information obtained from an individual's interactions with our websites to our social media, advertising and analytics providers for the purposes of displaying advertisements and delivering targeted advertising on our websites and potentially across other businesses or third party websites, for data, analytics and for content personalization features. These disclosures may qualify as 'sales' or 'sharing' of personal information for valuable consideration or cross-context behavioral advertising. The categories of personal information we may disclose for these purposes include: Identifiers Internet/Network information Inferences

Excerpt from Marqeta's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

1. REGULATORY LANDSCAPE: This provision directly implicates the CCPA, including the sale and sharing opt-out requirements established under the California Privacy Rights Act amendments. The California Privacy Protection Agency and the California Attorney General are the primary enforcement authorities. The provision's acknowledgment that disclosures may qualify as sales or sharing triggers CCPA requirements for a clear and conspicuous opt-out link and recognition of opt-out preference signals including Global Privacy Control. 2. GOVERNANCE EXPOSURE: Medium. The provision explicitly acknowledges that advertising-related disclosures may constitute CCPA sales or sharing, which requires a documented and functional opt-out pathway. The document states that GPC signals are recognized but notes that signal persistence may be lost upon browser changes, reinstallation, or cookie clearing, which may warrant review against California Privacy Protection Agency guidance on frictionless opt-out requirements. 3. JURISDICTION FLAGS: This provision applies specifically to California residents under the CCPA. Residents of other U.S. states covered under the Other U.S. States supplemental notice may also have opt-out rights for targeted advertising and data sales under applicable state law, as addressed in Section B of the U.S. supplemental provisions. EU and UK residents are addressed separately through cookie consent mechanisms under GDPR. 4. CONTRACT AND VENDOR IMPLICATIONS: The disclosure of identifiers, network data, and inferences to social media, advertising, and analytics providers for these purposes requires data processing agreements or equivalent contractual frameworks with those third parties. Procurement teams should confirm that contracts with advertising technology vendors include CCPA-compliant service provider or third-party terms, and that any sharing qualifying as a sale is accurately categorized for opt-out signal processing. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should evaluate whether the GPC signal recognition mechanism satisfies California Privacy Protection Agency requirements for a frictionless opt-out, particularly given the stated limitations on signal persistence. Data mapping should confirm which advertising and analytics vendors receive data qualifying as sales or sharing and whether those vendor agreements are structured to support lawful CCPA processing. Annual updates to the CCPA personal information summary table should be reviewed to ensure currency.

Full institutional analysis

Regulatory citations, enforcement risk, and due diligence action items.

Get same-day alerts when this changes → Get Analyst

Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.

Applicable agencies

  • FTC
    The FTC has oversight authority over consumer protection and unfair or deceptive practices related to online behavioral advertising and data sharing disclosures
    File a complaint →
  • State AG
    The California Attorney General and California Privacy Protection Agency have enforcement authority over CCPA sale and sharing opt-out requirements applicable to this provision
    File a complaint →

Provision details

Document information
Document
Marqeta Privacy Policy
Entity
Marqeta
Document last updated
May 5, 2026
Tracking information
First tracked
July 12, 2026
Last verified
July 12, 2026
Record ID
CA-P-074555
Document ID
CA-D-00667
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
6553971c090c305c5e2834dd25ed83821a9bbb190a5c70870df2987f69e7c0d8
Analysis generated
July 12, 2026 17:53 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Marqeta
Document: Marqeta Privacy Policy
Record ID: CA-P-074555
Captured: 2026-07-12 17:53:18 UTC
SHA-256: 6553971c090c305c…
URL: https://conductatlas.com/platform/marqeta/marqeta-privacy-policy/provision/CA-P-074555/ccpa-sale-or-sharing-of-personal-information/
Accessed: July 23, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Get Compliance

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Marqeta's CCPA Sale or Sharing of Personal Information clause do?

This provision requires Marqeta to maintain a compliant CCPA opt-out mechanism for California residents and to honor Global Privacy Control signals as an opt-out preference signal, with the California Privacy Protection Agency as a relevant enforcement authority. The provision applies specifically to website-derived data and not to Marqeta's payment processing or card program management services, which are governed separately.

How does this clause affect you?

Under this provision, California residents' identifiers, browsing activity, and behavioral inferences collected from Marqeta's websites may be disclosed to advertising and analytics partners, with opt-out available via Global Privacy Control browser signals, the Digital Advertising Alliance or Network Advertising Initiative opt-out tools, or the Cookie Settings link on Marqeta's website.

Is ConductAtlas affiliated with Marqeta?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Marqeta.