What are the institutional and regulatory implications of this document?

1) REGULATORY LANDSCAPE: This policy engages GDPR and UK GDPR (for EU and UK users respectively), CCPA and CPRA (for California residents), COPPA (the policy asserts the service is not directed to children under 13), and various national privacy laws addressed through supplemental disclosures. The FTC has general jurisdiction over Netflix's privacy and advertising practices in the US. The policy's authorization of behavioral advertising based on cross-site tracking by Advertising Companies, and…

How does Netflix's Netflix Privacy Statement affect users?

The document establishes that Netflix processes voice recordings, detailed viewing and gaming histories, and household-level advertising preference inferences derived from third-party Advertising Company data. Ad-supported plan users operate under terms authorizing behavioral advertising based on cross-site and cross-app activity tracking by external partners. The document permits users to adjust advertising preferences, opt out of behavioral advertising, and modify cookie settings through Netf…

How often is Netflix's Netflix Privacy Statement updated?

ConductAtlas monitors this document daily and captures every version with cryptographic hashing and timestamp verification. Update frequency varies — see the change timeline on this page for complete version history.

Can I get alerted when Netflix updates this document?

Yes. Watcher subscribers ($9.99/month) can add Netflix to their watchlist and receive same-day email alerts whenever this document or any other Netflix document changes.

CA-D-000039

Netflix Privacy Statement

Netflix

Last change detected April 23, 2026 Privacy policy

SHA-256: cb9753efac1180a1cf5… 4 versions captured 3 changes documented

Create free account

Track 1 platform and get the weekly governance digest. No credit card required.

View original document at Netflix ↗

This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology

8 Total

2 High severity

6 Medium severity

0 Low severity

Summary

This document establishes Netflix's data collection and processing practices across its streaming, gaming, and shopping services. Netflix collects viewing and gaming history, voice inputs and recordings, device identifiers, payment and purchase history, and receives third-party advertising data about user activity on external websites and apps. For ad-supported plan subscribers, the document authorizes Netflix to deliver behavioral advertising based on inferences about household advertising preferences, with user adjustment options available through account settings.

Technical / Legal Breakdown

This document is Netflix's global Privacy Statement governing the collection, use, and disclosure of personal information across the Netflix service, Netflix Games, and related functionalities, with stated legal bases varying by jurisdiction (including GDPR-based bases for EU/EEA users and CCPA-based disclosures for California residents). The policy states that Netflix collects personal details, payment details, purchase information, account and profile data, usage information (including playback events, voice inputs, game activity, and app interactions), advertising information (including inferences about household preferences and data received from Advertising Companies), device and network identifiers, and communications; and the terms authorize disclosure of this information to service providers, advertising partners, promotional partners, business partners, social media platforms, and third-party app providers, as well as in connection with corporate transactions. The policy asserts collection of voice inputs including transcripts and recordings, behavioral advertising based on cross-site and cross-app tracking via Advertising Companies, and inferences about users and households derived from collected data, all of which engage privacy frameworks in multiple jurisdictions in ways that may be subject to additional consent or opt-out requirements depending on applicable law. The policy engages GDPR (for EU/EEA users), the UK GDPR, CCPA/CPRA (for California residents), COPPA (the document states the service is not directed to children under 13 and that Netflix does not knowingly collect their data), and various national and regional privacy laws referenced through supplemental disclosures. Material compliance considerations include the adequacy of consent mechanisms for behavioral advertising and cross-context data sharing, the lawfulness of international data transfers (the policy references Standard Contractual Clauses and other transfer mechanisms), and the completeness of data subject rights fulfillment across jurisdictions.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial

3 important changes detected

4 versions captured · Last updated: April 2026

April 23, 2026

low

What changed Netflix modified four sentences in its Privacy Statement on April 23, 2026, making minor punctuation changes and adding language about cart abandonment tracking and SMS cart reminders. The changes remove commas in subsection headers and expand the stated uses of cookies and similar technologies to explicitly include tracking shopping cart activity and sending cart reminder messages via SMS. These updates clarify and expand the technical mechanisms Netflix uses to track user behavior and communicate with users.

Why this matters The updated Privacy Statement now explicitly discloses that Netflix uses cookies and similar technologies to track items placed in shopping carts, monitor when carts are abandoned, and determine when to send cart reminder messages via SMS. Previously, this specific use case was not mentioned in the policy's description of technology deployment. The revised language does not establish new consent requirements or opt-out mechanisms; it clarifies an existing technical practice in the stated purposes section. You can manage cookie preferences through the 'How can I exercise choice regarding these technologies?' section of the policy, though the SMS reminder functionality may be governed by separate communication preferences.

View full change record →

April 19, 2026

medium

What changed Netflix updated its privacy statement on April 19, 2026 to add a new section covering US state privacy requirements, clarify how it collects and uses personal information, and expand disclosure of data collection practices. The statement now explicitly includes voice inputs with transcripts and recordings as collected data, describes new inferences made about user preferences for ad targeting, and references a separate US State Privacy Notice. The changes formalize existing practices under state privacy laws and provide more granular disclosure of data categories.

Why this matters The updated privacy statement now explicitly discloses that Netflix collects voice inputs including transcripts and recordings when users interact with voice-related features, and that it makes inferences about user and household preferences for ad targeting purposes. The statement adds a new section titled 'Supplemental Privacy Disclosures for US Residents' that references a separate US State Privacy Notice containing 'Notice at Collection' details, alongside new subsections covering personal information collection, uses, disclosure for business purposes, data sales or sharing, retention, use of de-identified information, appeals rights, and financial incentive notices. The change brings the privacy statement into alignment with state privacy laws like CCPA and similar frameworks. You can access the US State Privacy Notice by clicking the provided link, visiting netflix.com/privacy#states, or scrolling to the new US residents section.

View full change record →

March 6, 2026 medium

Netflix's updated privacy statement on March 6, 2026 removed specific US state privacy disclosures from the main document and consolidated regional privacy information. The statement simplified language around data collection …

View change record →

Recent Provision Changes Apr 19, 2026

10 provisions unchanged.

View full change record →

High — 2 provisions

Behavioral Advertising via Third-Party Advertising Companies Compare →

Netflix receives data about you from outside advertising companies, including information about your behavior on other websites and apps, and uses this combined data to show you targeted ads on Netflix based on your activity across the broader internet.

Added May 12, 2026 Standard Seen across 189 platforms
Disclosure to Advertising and Promotional Partners Compare →

Netflix shares data about your ad interactions, device identifiers, and inferred household preferences with advertising partners, and also receives behavioral profiles about you from those partners.

Added May 12, 2026 Standard Seen across 189 platforms

Medium — 6 provisions

Voice Input Collection Including Transcripts and Recordings Compare →

When you use voice features on Netflix, the policy states that Netflix collects your voice inputs including both transcripts and recordings of what you say.

Added May 12, 2026 Standard Seen across 198 platforms
International Transfers of Personal Information Compare →

Netflix transfers personal information across international borders, and the policy references the use of Standard Contractual Clauses and other legal mechanisms to authorize those transfers for users in regions such as the EU and UK.

Added April 3, 2026 Standard Seen across 246 platforms
Data Retention Policy Compare →

Netflix keeps your personal information for as long as it considers necessary for its business purposes or as required by law, with the retention period determined by Netflix based on the nature and purpose of the data.

Added April 3, 2026 Standard Seen across 223 platforms
Minors Data Collection Policy Compare →

Netflix states its service is intended for adults 18 and older, that children under 13 are not knowingly enrolled as subscribers, and that any data relating to children under 13 should be provided only through a parent's account in connection with Kids Profile features.

Added May 12, 2026 Standard Seen across 251 platforms
Cookies and Cross-Site Tracking Technologies Compare →

Netflix states it uses cookies, resettable device identifiers, advertising identifiers, and pixel tags to track users' activity on and off the Netflix service for purposes including authentication, analytics, and advertising.

Added May 12, 2026 Standard Seen across 251 platforms
User Privacy Rights and Deletion Rights Compare →

The policy states that users can exercise privacy rights including access, correction, deletion, and objection by contacting Netflix's Data Protection Officer at privacy@netflix.com or through account settings.

Added May 12, 2026 Standard Seen across 223 platforms