When you use voice features on Netflix, the policy states that Netflix collects your voice inputs including both transcripts and recordings of what you say.
This analysis describes what Netflix's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The policy explicitly states collection of voice recordings and transcripts, which may implicate state wiretapping statutes and biometric privacy laws depending on jurisdiction and implementation.
Interpretive note: The provision does not specify retention periods, downstream processing purposes, or whether voice data is shared with third parties, creating uncertainty about the full scope of the collection.
The updated privacy statement now explicitly discloses that Netflix collects voice inputs including transcripts and recordings when users interact with voice-related features, and that it makes inferences about user and household preferences for ad targeting purposes. The statement adds a new section titled 'Supplemental Privacy Disclosures for US Residents' that references a separate US State Privacy Notice containing 'Notice at Collection' details, alongside new subsections covering personal information collection, uses, disclosure for business purposes, data sales or sharing, retention, use of de-identified information, appeals rights, and financial incentive notices. The change brings the privacy statement into alignment with state privacy laws like CCPA and similar frameworks. You can access the US State Privacy Notice by clicking the provided link, visiting netflix.com/privacy#states, or scrolling to the new US residents section.
View change record →The updated privacy statement reorganizes and consolidates disclosures rather than expanding data collection practices. However, the statement removes explicit reference to the US State Privacy Notice from the main body, requiring users to navigate to supplemental sections to access state-specific privacy rights and disclosures. The revised language also removes the prior statement that Netflix makes inferences about household ad preferences, and removes mention of voice inputs and transcripts from the usage information description, narrowing the scope of explicitly disclosed data collection practices. You can access US state privacy notices by navigating to the 'Supplemental Privacy Disclosures for Certain Services' section or visiting netflix.com/privacy#states.
View change record →Users who use voice-related features on Netflix should be aware that the policy authorizes collection and retention of voice recordings and transcripts of their voice inputs, in addition to other interaction data such as camera access for QR-code and game features.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes; we do not disclose it to third parties without your prior consent; and we will only use it for the specific purposes described in this Policy.
We collect your personal data when you use our Services, create a new eBay account, provide us with information via a web form, add or update information in your eBay account, participate in online community discussions or otherwise interact with us.
Monitoring
Netflix has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We collect information about your interaction with the Netflix service (including playback events, such as play, pause, etc.); choices made when engaging with interactive titles, your Netflix game activity (such as gameplay, game use and interaction information, and progress or saved game information); Netflix viewing and gaming history; search queries on the Netflix service; voice inputs (including transcripts and recordings) when using voice-related features; and other information about your use and interaction with the Netflix service (such as app clicks, text input, page views, time and duration of access, and camera/photo access for QR-code functionality and Netflix games features).— Excerpt from Netflix's Netflix Privacy Statement
1) REGULATORY LANDSCAPE: Voice recording collection may engage state wiretapping and eavesdropping statutes in California (CIPA), Illinois, and other two-party consent states. If voice recordings are processed to derive biometric identifiers (e.g., voiceprints), Illinois BIPA and similar statutes may apply. GDPR Article 9 may apply if voice data is processed to infer special category characteristics. The FTC Act applies to deceptive practices around consent for audio collection. 2) GOVERNANCE EXPOSURE: Medium. The provision discloses voice recording collection but does not specify the retention period, the processing purposes beyond voice-related features, or whether voice data is shared with third parties. The lack of specificity creates compliance exposure in jurisdictions requiring explicit consent for audio recording. 3) JURISDICTION FLAGS: Illinois BIPA may apply if voiceprints are derived from recordings. California CIPA may apply depending on the nature of voice collection and processing. EU/EEA GDPR requires a clear legal basis for processing audio recordings. Users in two-party consent states should be aware that the adequacy of any consent mechanism for voice recording collection may be subject to local legal standards. 4) CONTRACT AND VENDOR IMPLICATIONS: If voice processing is performed by third-party service providers, data processing agreements should address the scope of use, retention, and deletion of voice data. Compliance teams should assess whether voice data is shared with any Advertising Companies or analytics providers. 5) COMPLIANCE CONSIDERATIONS: Legal teams should assess whether Netflix's in-app disclosures and consent flows for voice features satisfy applicable state and federal consent requirements. Retention periods for voice transcripts and recordings should be documented and reviewed for minimization compliance. Data subject rights requests relating to voice data should be addressed in the deletion and access workflows.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The policy explicitly states collection of voice recordings and transcripts, which may implicate state wiretapping statutes and biometric privacy laws depending on jurisdiction and implementation.
Users who use voice-related features on Netflix should be aware that the policy authorizes collection and retention of voice recordings and transcripts of their voice inputs, in addition to other interaction data such as camera access for QR-code and game features.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Netflix.