The policy states that NVIDIA collects identity enrichment data including names, email addresses, job titles, company affiliations, associated industries, and social media handles from third-party data providers, combines it with other data NVIDIA holds, and shares it with business partners for marketing communications.
This analysis describes what NVIDIA NIM's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes the combination of third-party sourced enrichment data with NVIDIA's own data holdings and the onward sharing of that combined data with business partners for marketing, creating multi-party data flows that may require evaluation under GDPR, CCPA, and applicable data broker regulations. The inclusion of social media handles as a collected and shared data category is operationally distinct from standard contact data enrichment practices.
The updated Privacy Policy removes all disclosure language about how NVIDIA and third-party partners use cookies and other tracking technologies. Previously, the policy stated that cookies were used 'to collect and record information' for 'performance improvement, analytics, and to assist in our marketing efforts' and described consent mechanisms like 'Accept All' and 'Manage Settings'. The updated policy contains no equivalent disclosure of these tracking practices, data collection methods, or consent options. You can review NVIDIA's full Privacy Policy at their Privacy Center, though the updated version no longer describes cookie and tracking technology practices that were previously disclosed.
View change record →Under this clause, NVIDIA may combine data obtained from third-party enrichment providers, including social media handles and industry affiliations, with other personal data it holds, and share the combined dataset with business partners for marketing purposes. The agreement states this processing is based on legitimate interest, meaning it does not require prior consent in jurisdictions where legitimate interest is a valid lawful basis.
Cross-platform context
See how other platforms handle Identity Enrichment Data Sharing with Third-Party Vendors and similar clauses.
Compare across platforms →"We collect identity and enrichment data from third-party sources such as your name, email, job title, company, associated industries, and social media handles. We use this data, alone or combined with other information about you, to more effectively communicate with you and others, including by customizing online content you view or making recommendations. We process this data based on our legitimate interest in finding and communicating with potential customers. We share this information with business partners so they can communicate with you about relevant products or services.Excerpt from NVIDIA NIM's NVIDIA Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages GDPR's requirements for lawful basis, transparency, and data minimization, as well as CCPA's notice and opt-out requirements for sharing personal data with third parties for cross-context behavioral advertising.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision authorizes the combination of third-party sourced enrichment data with NVIDIA's own data holdings and the onward sharing of that combined data with business partners for marketing, creating multi-party data flows that may require evaluation under GDPR, CCPA, and applicable data broker regulations. The inclusion of social media handles as a collected and shared data category is operationally distinct …
Under this clause, NVIDIA may combine data obtained from third-party enrichment providers, including social media handles and industry affiliations, with other personal data it holds, and share the combined dataset with business partners for marketing purposes. The agreement states this processing is based on legitimate interest, meaning it does not require prior consent in jurisdictions where legitimate interest is a …
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by NVIDIA NIM.