Netflix receives data about you from outside advertising companies, including information about your behavior on other websites and apps, and uses this combined data to show you targeted ads on Netflix based on your activity across the broader internet.
This analysis describes what Netflix's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes Netflix to incorporate behavioral profiles built from your activity on unaffiliated third-party services into its advertising targeting, meaning Netflix ads may reflect your browsing and purchase activity outside of Netflix.
The updated privacy statement now explicitly discloses that Netflix collects voice inputs including transcripts and recordings when users interact with voice-related features, and that it makes inferences about user and household preferences for ad targeting purposes. The statement adds a new section titled 'Supplemental Privacy Disclosures for US Residents' that references a separate US State Privacy Notice containing 'Notice at Collection' details, alongside new subsections covering personal information collection, uses, disclosure for business purposes, data sales or sharing, retention, use of de-identified information, appeals rights, and financial incentive notices. The change brings the privacy statement into alignment with state privacy laws like CCPA and similar frameworks. You can access the US State Privacy Notice by clicking the provided link, visiting netflix.com/privacy#states, or scrolling to the new US residents section.
View change record →The updated privacy statement reorganizes and consolidates disclosures rather than expanding data collection practices. However, the statement removes explicit reference to the US State Privacy Notice from the main body, requiring users to navigate to supplemental sections to access state-specific privacy rights and disclosures. The revised language also removes the prior statement that Netflix makes inferences about household ad preferences, and removes mention of voice inputs and transcripts from the usage information description, narrowing the scope of explicitly disclosed data collection practices. You can access US state privacy notices by navigating to the 'Supplemental Privacy Disclosures for Certain Services' section or visiting netflix.com/privacy#states.
View change record →For users on ad-supported Netflix plans, the policy authorizes the use of demographic data, interest inferences, and behavioral profiles received from external Advertising Companies derived from activity on other websites and apps to select which ads are shown. Users can adjust this through advertising preferences in account settings.
How other platforms handle this
We may display advertisements on our Services and those advertisements may be targeted to your interests based on your personal information. We may share your personal information with advertising partners for interest-based advertising purposes. You may opt out of interest-based advertising by visi...
src="https://trc.taboola.com/1142432/trc/3/json" ... src="https://www.googletagmanager.com/gtag/js?id=DC-15299257" ... src="https://tr.snapchat.com/config/com/af90c7f8-bd28-4988-b1ce-1711aad792f4.js" ... src="https://tr.snapchat.com/config/com/8fbe1595-8c5a-46b1-bbb2-66f3d57debde.js" ... src="https:...
We collect your personal data when you use our Services, create a new eBay account, provide us with information via a web form, add or update information in your eBay account, participate in online community discussions or otherwise interact with us.
Monitoring
Netflix has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We collect information about the advertisements on the Netflix service that you view or interact with, device information (such as resettable device identifiers), IP addresses, inferences we make about you or your household based on data we collect from or about you (such as the types of ads you or your household prefer to see), and information provided by Advertising Companies (such as your demographic information, likely interests they have collected or inferred from your interactions and purchases through their own and other websites and apps). We also collect information on Advertiser websites and apps. We use this information to support advertisements (including behavioral advertisements in accordance with your preferences. "Behavioral Advertisements" are those that are selected based on information about your use and/or interactions with unaffiliated third party services).— Excerpt from Netflix's Netflix Privacy Statement
1) REGULATORY LANDSCAPE: This provision implicates CCPA/CPRA's right to opt out of sharing personal information for cross-context behavioral advertising (California Civil Code Section 1798.120), GDPR Articles 6 and 7 regarding lawful basis and consent for processing involving data received from third parties for advertising purposes, and the FTC Act's prohibition on unfair or deceptive practices. The FTC has scrutinized cross-context behavioral advertising practices. EU/EEA users may require explicit consent for this form of processing under GDPR; the policy's reliance on user preferences and opt-out mechanisms may require assessment against applicable consent standards. 2) GOVERNANCE EXPOSURE: High. The provision authorizes receipt of interest and behavioral profiles from external Advertising Companies derived from cross-site and cross-app tracking, which is a data flow subject to heightened scrutiny under CCPA/CPRA and GDPR. The adequacy of Netflix's consent and opt-out mechanisms for this data flow is a material compliance question, particularly for California and EU/EEA user populations. 3) JURISDICTION FLAGS: California residents have CPRA opt-out rights for sharing personal information for cross-context behavioral advertising. EU/EEA users may require affirmative consent rather than opt-out under GDPR depending on the legal basis asserted. UK GDPR similarly applies to UK users. Illinois, Washington, and other states with comprehensive privacy laws may impose additional requirements. 4) CONTRACT AND VENDOR IMPLICATIONS: Data sharing arrangements with Advertising Companies should be governed by data processing agreements or equivalent contracts. Compliance teams should assess whether Advertising Company relationships constitute sales or sharing of personal information under CCPA/CPRA, triggering opt-out and disclosure obligations. The provision does not specify the number or identity of Advertising Companies involved, which may complicate vendor mapping. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should audit the consent and opt-out mechanisms provided to US and EU/EEA users for behavioral advertising to confirm they satisfy applicable legal standards. A data flow map documenting which Advertising Companies receive or provide data, and under what contractual basis, should be maintained and reviewed. CPRA opt-out links and GDPR consent records should be reviewed for completeness and accuracy.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision authorizes Netflix to incorporate behavioral profiles built from your activity on unaffiliated third-party services into its advertising targeting, meaning Netflix ads may reflect your browsing and purchase activity outside of Netflix.
For users on ad-supported Netflix plans, the policy authorizes the use of demographic data, interest inferences, and behavioral profiles received from external Advertising Companies derived from activity on other websites and apps to select which ads are shown. Users can adjust this through advertising preferences in account settings.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Netflix.