Netflix shares your personal information with a wide range of external parties including advertising companies, social media companies, business partners, and promotional partners — not just with service providers who help run Netflix.
Removal of comprehensive disclosure categories and recipients of personal information sharing, reducing transparency about data sharing practices with external parties.
View full change record →Your Netflix data — including viewing history, device identifiers, and behavioral information — is shared with advertising companies, social media platforms, and promotional partners, meaning multiple external organizations hold your personal information.
How other platforms handle this
For the purposes of fraud prevention, we share your Personal Information with Forter, Inc., our third-party provider of fraud screening services, who may use such information in accordance with the Forter privacy policy.
When you link your Epic account with your account on a third-party social media (e.g., Facebook), gaming (e.g., Steam), or similar platform, we may receive information from that platform (e.g., your third-party display name, user ID, device information, name, and email address).
When we transfer personal information outside of Europe, we use a variety of legal mechanisms to safeguard the transfer, including Standard Contractual Clauses approved by the European Commission.
The breadth of third-party recipients means your personal data flows to numerous external organizations, each with their own data practices, increasing the risk of secondary data uses and potential data breaches beyond Netflix's control.
REGULATORY FRAMEWORK: This provision implicates GDPR Article 13(1)(e) (identity of recipients or categories of recipients); GDPR Article 28 (processor agreements) and Article 26 (joint controller agreements) depending on the nature of each recipient relationship; CCPA/CPRA §1798.115 (right to know who personal information is disclosed to) and §1798.120 (opt out of sale/sharing) enforced by CPPA; VPPA 18 U.S.C. §2710 for disclosure of video viewing history to third parties; and FTC Act Section 5 for inadequate disclosure of sharing practices.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.