Provision record
OpenSea · OpenSea Privacy Policy · View original document ↗

Security breach notification per applicable law

Common · 267 of 343 platforms
Stay ahead of the changes
Track OpenSea and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what OpenSea's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

Recent Activity

This document changed recently

Medium Oct 21, 2026

The updated policy establishes new collection of sensitive personal data categories not previously disclosed in explicit detail. Users of OpenSea's onramp services will have their full legal name, date of birth, tax ID, government-issued identification documents, mobile number, and IP address collected and transmitted to third-party onramp providers. Users subject to identity verification for rewards eligibility or compliance will have facial biometric data processed through third-party providers using facial recognition technology; the provider generates and holds the biometric identifier on OpenSea's behalf and destroys it within three years of last interaction. Users participating in rewards programs will have wallet address, name, contact information, and tax identification numbers collected for eligibility determination and tax reporting. You can decline to use onramp services and still access the Platform, and identity verification for rewards is required only in certain circumstances such as when required for rewards eligibility or compliance.

View change record →

How other platforms handle this

Postman

You will be notified via email and/or through a prominent notice on the Services if a transaction takes place, as well as any choices you may have regarding your information.

Workday

Your disclosure of Workday's Confidential Information pursuant to law or a judicial or administrative order will not be deemed to be a breach of this Agreement, if you (A) provide timely written notice...

Ramp

Recipient may disclose Discloser's Confidential Information: (i) to the extent required by applicable law or regulation; (ii) pursuant to a subpoena or order of a court or regulatory, self-regulatory, or legislative body of competent jurisdiction.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
In the event that any information under our custody and control is compromised as a result of a breach of our security, we will take steps to investigate and remediate the situation and, in accordance with applicable laws and regulations, may notify...

Excerpt from OpenSea's Privacy Policy

Provision details

Document information
Document
OpenSea Privacy Policy
Entity
OpenSea
Date stated by the document
Oct. 20, 2026
As printed in OpenSea’s text (version CA-V-007729), not a ConductAtlas date.
Tracking information
First captured by ConductAtlas
April 21, 2026
Text quoted from version
CA-V-006684, captured Sept. 11, 2026
Record ID
CA-P-032713
Document ID
CA-D-000210
Evidence Provenance
Source URL
Wayback Machine
Archived bytes SHA-256 (version CA-V-006684)
6aa3b9dbab581ddaa4965fce49970c226c38a535991e33169aadda50c09968c4
Analysis generated
July 9, 2026 06:33 UTC
Methodology
Evidence
✓ Excerpt found in version CA-V-006684, captured Sept. 11, 2026 (checked Oct. 5, 2026)
Not the current version. The document's current version is CA-V-007729, captured Oct. 21, 2026; this clause has not been re-checked against it.
Citation Record
Entity: OpenSea
Document: OpenSea Privacy Policy
Record ID: CA-P-032713
Version: CA-V-006684
Captured: 2026-09-11 00:35:04 UTC
SHA-256: 6aa3b9dbab581dda…
URL: https://conductatlas.com/platform/opensea/opensea-privacy-policy/provision/CA-P-032713/security-breach-notification-per-applicable-law/
Accessed: Oct. 24, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Categories

Other risks in this policy

Get the weekly coverage letter

Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.

Frequently Asked Questions

What does OpenSea's Security breach notification per applicable law clause do?

The clause states: “In the event that any information under our custody and control is compromised as a result of a breach of our security, we will take steps to investigate and remediate the situation and, in accordance with applicable laws and regulations, may notify...”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 267 platforms. See the full comparison.

Is ConductAtlas affiliated with OpenSea?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenSea.