Okta shares your personal data with third-party advertising companies who use it to show you targeted ads for Okta's products. This sharing happens in addition to sharing with service providers who help run Okta's operations.
This analysis describes what Okta's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Sharing personal data with advertising partners for behavioral targeting goes beyond what most users expect from an enterprise identity security company, and under CPRA this constitutes 'sharing' that triggers an opt-out right even if no money changes hands.
Your name, email, device identifiers, and browsing behavior on Okta's website may be shared with advertising partners like Google and Adobe for targeted ad campaigns, meaning your data flows to additional third parties beyond Okta's core service providers.
How other platforms handle this
Zoom may share personal data with third-party advertising partners and analytics providers to deliver targeted advertising and measure the effectiveness of advertising campaigns. This may include sharing identifiers, device information, and behavioral data with partners such as advertising networks.
We may share personal information with third-party advertising partners and analytics providers to help us understand how our services are used and to serve relevant advertising. These third parties may use cookies, pixel tags, and similar tracking technologies to collect information about your use ...
We receive some of the data mentioned above from third parties. The below table describes the categories of those third parties. If you connect your Spotify account to a third party application, service or device, we may collect and use information from them. This collection is to make the integrati...
Monitoring
Okta has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We may share your personal information with third-party business partners, vendors, and service providers who perform services on our behalf, such as web hosting, data analysis, payment processing, order fulfillment, information technology and related infrastructure provision, customer service, email delivery, auditing, and other services. We may also share your personal information with advertising partners to provide you with advertisements about our products and services that may be of interest to you.— Excerpt from Okta's Okta Privacy Policy
(1) REGULATORY FRAMEWORK: This provision implicates CPRA §1798.120 (right to opt out of sharing for cross-context behavioral advertising), GDPR Art. 6(1)(a) and (f) (lawful basis for sharing with advertising partners, which typically requires consent or a balancing legitimate interest test under EDPB guidance), ePrivacy Directive cookie consent rules, and FTC Act Section 5 (deceptive practices if sharing is not adequately disclosed). The California Privacy Protection Agency, EU DPAs, and FTC hold enforcement authority. (2)
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Sharing personal data with advertising partners for behavioral targeting goes beyond what most users expect from an enterprise identity security company, and under CPRA this constitutes 'sharing' that triggers an opt-out right even if no money changes hands.
Your name, email, device identifiers, and browsing behavior on Okta's website may be shared with advertising partners like Google and Adobe for targeted ad campaigns, meaning your data flows to additional third parties beyond Okta's core service providers.
ConductAtlas has identified this type of provision across 13 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Okta.