Paramount+ collects data about what you watch, your device, your IP address, and your location, and may use this data to target you with advertising and share it with third-party companies.
This analysis describes what Paramount+'s agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Viewing history and location data are considered sensitive personal information under several state privacy laws, and the sharing of this data with third-party partners for advertising purposes may constitute a data sale under CCPA, giving California residents opt-out rights.
Interpretive note: The specific categories of data shared with third parties and the legal basis for that sharing are not fully detailed in the truncated document text; a complete privacy policy review would be needed for a comprehensive assessment.
Your viewing history, device identifiers, and location data are collected and may be shared with third-party advertising and analytics partners; California residents have the right to opt out of the sale or sharing of their personal information under CCPA.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes; we do not disclose it to third parties without your prior consent; and we will only use it for the specific purposes described in this Policy.
We collect your personal data when you use our Services, create a new eBay account, provide us with information via a web form, add or update information in your eBay account, participate in online community discussions or otherwise interact with us.
Monitoring
Paramount+ has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We collect information about you when you use the Service, including information about your viewing activity, the content you access, your device identifiers, IP address, and location data. We may use this information to personalize your experience, serve targeted advertising, and share with third-party partners and service providers.— Excerpt from Paramount+'s Paramount+ Terms of Use
(1) REGULATORY LANDSCAPE: This provision engages CCPA and CPRA (California), which grant residents rights to know, delete, correct, and opt out of the sale or sharing of personal information. Viewing history data is additionally protected under the Video Privacy Protection Act (VPPA), which restricts disclosure of personally identifiable information related to video content consumption. GDPR applies to EU users and imposes lawful basis, purpose limitation, and data subject rights requirements on all categories of personal data collected. (2) GOVERNANCE EXPOSURE: High. The intersection of viewing history collection, VPPA, and CCPA creates significant compliance exposure. The VPPA has been the subject of multiple class action lawsuits against streaming services for sharing viewing data with advertising platforms such as Meta's Pixel and Google Analytics, which are visibly loaded on the Paramount+ platform. (3) JURISDICTION FLAGS: California, Colorado, Virginia, Connecticut, and other states with comprehensive privacy laws impose opt-out rights for data sharing with third parties for advertising. EU users have GDPR rights including the right to restrict processing and object to profiling. The VPPA applies nationwide in the United States for video content providers. (4) CONTRACT AND VENDOR IMPLICATIONS: Third-party analytics and advertising vendors receiving viewing history or device identifiers must be assessed as data processors or data brokers under applicable law; data processing agreements should reflect CCPA and GDPR requirements. The presence of Facebook, Google, Bing, and other tracking scripts on the platform (visible in the page source) suggests substantial third-party data flows that require documented legal basis. (5) COMPLIANCE CONSIDERATIONS: Legal teams should conduct a data mapping exercise covering all third-party tags and pixels active on the platform to assess VPPA and CCPA compliance. Opt-out mechanisms for California and other state residents should be audited for accessibility and functionality. GDPR consent management must be evaluated for adequacy in EU jurisdictions.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Viewing history and location data are considered sensitive personal information under several state privacy laws, and the sharing of this data with third-party partners for advertising purposes may constitute a data sale under CCPA, giving California residents opt-out rights.
Your viewing history, device identifiers, and location data are collected and may be shared with third-party advertising and analytics partners; California residents have the right to opt out of the sale or sharing of their personal information under CCPA.
ConductAtlas has identified this type of provision across 2 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Paramount+.