Depending on where you live, you may have rights to access, correct, delete, or port your data, opt out of targeted advertising and data sale, and file a complaint with a regulator. These rights vary by jurisdiction.
This analysis describes what Netflix's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision operationalizes Netflix's compliance with regional privacy regulations by establishing a framework through which users can exercise legally recognized data rights. The provision conditions the availability of these rights on jurisdiction, reflecting Netflix's obligation to align its privacy practices with applicable regulatory requirements in different markets.
The updated privacy statement now explicitly discloses that Netflix collects voice inputs including transcripts and recordings when users interact with voice-related features, and that it makes inferences about user and household preferences for ad targeting purposes. The statement adds a new section titled 'Supplemental Privacy Disclosures for US Residents' that references a separate US State Privacy Notice containing 'Notice at Collection' details, alongside new subsections covering personal information collection, uses, disclosure for business purposes, data sales or sharing, retention, use of de-identified information, appeals rights, and financial incentive notices. The change brings the privacy statement into alignment with state privacy laws like CCPA and similar frameworks. You can access the US State Privacy Notice by clicking the provided link, visiting netflix.com/privacy#states, or scrolling to the new US residents section.
View change record →The updated privacy statement reorganizes and consolidates disclosures rather than expanding data collection practices. However, the statement removes explicit reference to the US State Privacy Notice from the main body, requiring users to navigate to supplemental sections to access state-specific privacy rights and disclosures. The revised language also removes the prior statement that Netflix makes inferences about household ad preferences, and removes mention of voice inputs and transcripts from the usage information description, narrowing the scope of explicitly disclosed data collection practices. You can access US state privacy notices by navigating to the 'Supplemental Privacy Disclosures for Certain Services' section or visiting netflix.com/privacy#states.
View change record →Your privacy rights under this policy depend heavily on where you live. EU residents have comprehensive GDPR rights, California residents have CPRA rights including opt-out of data sale, while users in many other countries may have more limited practical rights. You can exercise your rights by visiting your account settings or contacting privacy@netflix.com.
How other platforms handle this
You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
By providing your mobile phone number, you consent to receive automated text (SMS) messages from Instacart...To opt out, reply STOP. For help, reply HELP or contact us directly...
"Depending on where you live, you may have the right to: access the personal information we hold about you; correct or delete your personal information; restrict or object to our processing of your personal information; in some cases, port or transfer your personal information to another company; opt out of the processing of your personal information for purposes of targeted advertising, the sale of personal information, and profiling in furtherance of decisions that produce legal or similarly significant effects; not be discriminated against for exercising your privacy rights; and in certain countries, lodge a complaint with a supervisory authority if you have concerns about how we handle your personal information.Excerpt from Netflix's Privacy Statement
REGULATORY LANDSCAPE: The rights enumerated in this provision map to GDPR Articles 15 to 22 for EU/EEA users, CPRA rights for California residents, and comparable provisions in Colorado, Connecticut, Virginia, Texas, Oregon, and Montana state …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision operationalizes Netflix's compliance with regional privacy regulations by establishing a framework through which users can exercise legally recognized data rights. The provision conditions the availability of these rights on jurisdiction, reflecting Netflix's obligation to align its privacy practices with applicable regulatory requirements in different markets.
Your privacy rights under this policy depend heavily on where you live. EU residents have comprehensive GDPR rights, California residents have CPRA rights including opt-out of data sale, while users in many other countries may have more limited practical rights. You can exercise your rights by visiting your account settings or contacting privacy@netflix.com.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Netflix.