Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that users have rights to access, portability, correction, consent withdrawal, opt-out of sales and sharing, and erasure of their personal data at any time, and that NVIDIA commits to non-discriminatory treatment regardless of whether users exercise these rights. Users are also informed of the right to lodge complaints with regional data protection authorities.
This analysis describes what NVIDIA NIM's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses a comprehensive set of stated user rights aligned with GDPR and CCPA/CPRA frameworks and expressly commits to non-discriminatory treatment for users who exercise privacy rights, which is a specific CCPA/CPRA requirement. The availability of these rights in practice depends on the specific mechanisms provided through the NVIDIA Privacy Center and applicable jurisdictional law.
The updated Privacy Policy removes all disclosure language about how NVIDIA and third-party partners use cookies and other tracking technologies. Previously, the policy stated that cookies were used 'to collect and record information' for 'performance improvement, analytics, and to assist in our marketing efforts' and described consent mechanisms like 'Accept All' and 'Manage Settings'. The updated policy contains no equivalent disclosure of these tracking practices, data collection methods, or consent options. You can review NVIDIA's full Privacy Policy at their Privacy Center, though the updated version no longer describes cookie and tracking technology practices that were previously disclosed.
View change record →The agreement states that users can exercise rights to access, portability, correction, consent withdrawal, data sale and sharing opt-out, and erasure at any time through the NVIDIA Privacy Center or by contacting privacy@nvidia.com. The policy also states that exercising these rights will not result in discriminatory treatment by NVIDIA.
Cross-platform context
See how other platforms handle User Privacy Rights and Non-Discrimination Commitment and similar clauses.
Compare across platforms →Monitoring
NVIDIA NIM has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"You have the right to see the data we have collected, take it with you, make corrections, withdraw consent for future uses, opt out of sales and sharing, or erase your data all together at any time. Expect non-discrimination. You have the right to non-discriminatory treatment, regardless of whether you allow us to process your data. Protect your privacy—and your choices. If you feel we've failed in any way, you have the right to lodge a complaint with a data protection authority in your region.Excerpt from NVIDIA NIM's NVIDIA Privacy Policy
1) REGULATORY LANDSCAPE: The stated rights align with GDPR Articles 15 through 21 (access, rectification, erasure, restriction, portability, and objection) and CCPA/CPRA's consumer privacy rights framework including the right to opt out of sale and sharing and the non-discrimination requirement. The non-discrimination commitment is a specific CCPA/CPRA statutory requirement. The right to lodge complaints with data protection authorities is a GDPR requirement that NVIDIA discloses proactively. 2) GOVERNANCE EXPOSURE: Low for the rights disclosure itself. The operational implementation of these rights through the NVIDIA Privacy Center and email contact mechanisms warrants assessment to confirm that response timelines, verification procedures, and rights fulfillment processes meet applicable regulatory requirements, including GDPR's 30-day response requirement and CCPA's 45-day response requirement. 3) JURISDICTION FLAGS: GDPR response timelines and verification requirements apply to EU and UK data subjects. CCPA and CPRA response requirements apply to California residents. Other US states with enacted comprehensive privacy laws, including Virginia, Colorado, Texas, and Connecticut, impose their own rights and response requirements that NVIDIA's privacy rights program should address. 4) CONTRACT AND VENDOR IMPLICATIONS: B2B customers whose employees or end users have rights under applicable privacy law should confirm that their data processing agreements with NVIDIA establish appropriate data subject rights fulfillment workflows, including timelines for responding to requests forwarded from the B2B customer to NVIDIA. 5) COMPLIANCE CONSIDERATIONS: Legal teams should confirm that the NVIDIA Privacy Center's rights request mechanisms satisfy applicable verification and response timeline requirements across relevant jurisdictions. Records of rights requests and responses should be maintained as required by applicable law. The policy's statement that users can withdraw consent and request erasure at any time should be assessed against any processing activities for which NVIDIA relies on a basis other than consent, where erasure rights may be limited.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision discloses a comprehensive set of stated user rights aligned with GDPR and CCPA/CPRA frameworks and expressly commits to non-discriminatory treatment for users who exercise privacy rights, which is a specific CCPA/CPRA requirement. The availability of these rights in practice depends on the specific mechanisms provided through the NVIDIA Privacy Center and applicable jurisdictional law.
The agreement states that users can exercise rights to access, portability, correction, consent withdrawal, data sale and sharing opt-out, and erasure at any time through the NVIDIA Privacy Center or by contacting privacy@nvidia.com. The policy also states that exercising these rights will not result in discriminatory treatment by NVIDIA.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by NVIDIA NIM.