Okta may share your contact and behavioral data with business partners for marketing and with advertising companies to target you with more relevant ads across the internet.
This analysis describes what Okta's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Sharing data with advertising and analytics partners means your personal information may be used by companies beyond Okta to build profiles or serve targeted advertising, which is a significant practical expansion of how your data is used.
Interpretive note: The policy does not enumerate specific advertising and analytics partners, making it difficult to assess the full scope of third-party data flows from the document text alone.
Your personal data collected by Okta may be shared with third-party advertising and analytics companies and business partners, which can result in targeted advertising beyond Okta's own properties. California residents can opt out of this sharing; EU/EEA users can object to processing based on legitimate interests.
Cross-platform context
See how other platforms handle Sharing with Business Partners and Third Parties and similar clauses.
Compare across platforms →Monitoring
Okta has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We may share your personal information with third-party business partners who offer products and services that we believe may be of interest to you. We may also share personal information with advertising and analytics partners to help us understand the effectiveness of our marketing campaigns and to serve you with more relevant advertising.— Excerpt from Okta's Okta Privacy Policy
REGULATORY LANDSCAPE: This provision implicates GDPR Article 6 (lawful basis for sharing, most likely legitimate interests for B2B marketing), Article 26 (joint controller obligations if applicable), CCPA/CPRA sharing opt-out rights, and FTC guidance on third-party data sharing and behavioral advertising. Where advertising partners receive personal data for their own use, they may be independent controllers under GDPR, triggering joint controller or disclosure obligations. The FTC and California Privacy Protection Agency are the primary US enforcement authorities. GOVERNANCE EXPOSURE: Medium. The breadth of the 'business partners' category is not further specified in the policy, which creates uncertainty about the full scope of third-party data recipients. Under GDPR, the identities of data recipients or categories of recipients must be disclosed; the policy's general description may not satisfy this requirement for all purposes. JURISDICTION FLAGS: EU/EEA users have the right to object to processing for direct marketing and legitimate interests under GDPR. California residents have a right to opt out of sharing. Illinois and other states with emerging privacy laws may have additional consent requirements for certain sharing categories. CONTRACT AND VENDOR IMPLICATIONS: Organizations concerned about employee or customer data flowing from Okta-managed web properties to advertising partners should assess whether their enterprise agreement with Okta restricts this practice. Procurement teams evaluating Okta should request a list of third-party advertising and analytics partners receiving personal data. COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether GDPR-required recipient disclosures are adequately specific, whether legitimate interest assessments are documented for B2B sharing, and whether California opt-out mechanisms cover all relevant sharing with advertising partners. Annual review of Okta's list of advertising and analytics partners is advisable.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Sharing data with advertising and analytics partners means your personal information may be used by companies beyond Okta to build profiles or serve targeted advertising, which is a significant practical expansion of how your data is used.
Your personal data collected by Okta may be shared with third-party advertising and analytics companies and business partners, which can result in targeted advertising beyond Okta's own properties. California residents can opt out of this sharing; EU/EEA users can object to processing based on legitimate interests.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Okta.