The policy states that NVIDIA collects personal data including names, titles, work areas, publication histories, funding histories, mentions of NVIDIA technology, email addresses, phone numbers, and organizational affiliations from publicly available internet sources without direct interaction from the data subject, relying on legitimate interest as the lawful basis.
This analysis describes what NVIDIA NIM's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes data collection on individuals who have not directly engaged with NVIDIA, using legitimate interest as the stated lawful basis, which may require evaluation under GDPR's balancing test and transparency obligations for EU and UK data subjects. The data categories collected include contact information and professional histories sourced from public internet content.
The updated Privacy Policy removes all disclosure language about how NVIDIA and third-party partners use cookies and other tracking technologies. Previously, the policy stated that cookies were used 'to collect and record information' for 'performance improvement, analytics, and to assist in our marketing efforts' and described consent mechanisms like 'Accept All' and 'Manage Settings'. The updated policy contains no equivalent disclosure of these tracking practices, data collection methods, or consent options. You can review NVIDIA's full Privacy Policy at their Privacy Center, though the updated version no longer describes cookie and tracking technology practices that were previously disclosed.
View change record →Under this clause, NVIDIA states it may collect personal data about individuals from publicly available internet sources for marketing and market research purposes without a direct relationship with those individuals. The agreement states that hashed versions of this data may also be shared with advertising providers such as Google if the individual has consented to receive marketing communications.
Cross-platform context
See how other platforms handle Lead Generation from Publicly Available Sources and similar clauses.
Compare across platforms →"We collect certain personal data from publicly available sources (e.g., the internet) to find individuals and organizations that may be interested in our products or services. The personal data we collect includes names, titles, areas of work, publication or funding histories, mentions of NVIDIA technology, and contact information including emails, phone numbers, and associated organizations or collaborations. We use this data to understand the market for our products and to communicate with potential customers or partners. We process this data based on our legitimate interest in market research and in finding and communicating with potential customers.Excerpt from NVIDIA NIM's NVIDIA Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages GDPR Article 6 legitimate interest provisions and Article 14 transparency obligations for data not obtained directly from the data subject.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision authorizes data collection on individuals who have not directly engaged with NVIDIA, using legitimate interest as the stated lawful basis, which may require evaluation under GDPR's balancing test and transparency obligations for EU and UK data subjects. The data categories collected include contact information and professional histories sourced from public internet content.
Under this clause, NVIDIA states it may collect personal data about individuals from publicly available internet sources for marketing and market research purposes without a direct relationship with those individuals. The agreement states that hashed versions of this data may also be shared with advertising providers such as Google if the individual has consented to receive marketing communications.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by NVIDIA NIM.