NBCUniversal may collect your fingerprints or facial scans at theme parks and studios, as well as health-related information such as vaccine status. These are flagged as sensitive data categories subject to additional legal requirements.
This analysis describes what Peacock's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Biometric data is among the most sensitive personal information that can be collected because it is permanent and uniquely identifies you. Collection at physical venues like theme parks means this applies even to users who primarily think of themselves as streaming subscribers.
If you visit a Universal theme park or studio, your biometric identifiers such as facial scans or fingerprints may be collected and stored by NBCUniversal, creating long-term privacy exposure that cannot be reversed by closing an account or opting out of digital tracking.
How other platforms handle this
When you visit the Careers portion of our websites, we collect the information that you provide to us in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history and other in...
American does not knowingly collect personal information directly from children – persons under the age of 13, or another age if required by applicable law – other than when required to comply with the law or for safety and security reasons. Due to the nature of our Services, we may collect travel i...
We may collect information about your location, including precise geolocation information, when you use our Services. We use this information to provide location-based services, such as showing you products available in your area, and for other purposes described in this Privacy Policy.
Monitoring
Peacock has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Biometric identifiers:* For example: as permitted by law, facial scans or fingerprints we collect at some of our theme parks, studios, or our offices. Health Data:* For example: as permitted by law, vaccine or symptom related information. *Please note: this information is considered 'sensitive' under certain laws, and we process this information in accordance with applicable legal requirements.— Excerpt from Peacock's Peacock Privacy Policy
REGULATORY LANDSCAPE: Biometric data collection implicates the Illinois Biometric Information Privacy Act (BIPA), which requires informed written consent prior to collection and imposes statutory damages. Washington's My Health MY Data Act and similar statutes in Texas and Washington impose additional consent and deletion requirements for biometric and health-adjacent data. CCPA/CPRA designates biometric information and health data as sensitive personal information with heightened opt-out and consent rights. The FTC has flagged biometric data misuse as an enforcement priority. GOVERNANCE EXPOSURE: High. The collection of biometric identifiers at physical venues creates significant statutory liability exposure under BIPA, which provides a private right of action and per-violation damages. The policy's statement that collection occurs 'as permitted by law' does not itself constitute the affirmative written consent BIPA requires, and courts have scrutinized similar formulations. JURISDICTION FLAGS: Illinois creates the highest exposure due to BIPA's private right of action. Texas and Washington have biometric statutes enforceable by state attorneys general. CCPA/CPRA requires a separate opt-out mechanism for sensitive personal information. EU users are protected under GDPR Article 9, which treats biometric data as a special category requiring explicit consent or another enumerated legal basis. CONTRACT AND VENDOR IMPLICATIONS: Procurement teams should assess whether theme park operators and studio venue managers processing biometric data on behalf of NBCUniversal have executed data processing agreements that satisfy BIPA, GDPR Article 28, and CCPA service provider requirements. Indemnification provisions in venue operator contracts should address BIPA class action exposure. COMPLIANCE CONSIDERATIONS: Compliance teams should audit whether written consent mechanisms at physical collection points satisfy BIPA's requirements distinct from this online privacy policy. A data mapping exercise should confirm retention schedules for biometric data and whether a biometric data retention and destruction policy has been published as BIPA requires.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Biometric data is among the most sensitive personal information that can be collected because it is permanent and uniquely identifies you. Collection at physical venues like theme parks means this applies even to users who primarily think of themselves as streaming subscribers.
If you visit a Universal theme park or studio, your biometric identifiers such as facial scans or fingerprints may be collected and stored by NBCUniversal, creating long-term privacy exposure that cannot be reversed by closing an account or opting out of digital tracking.
ConductAtlas has identified this type of provision across 2 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Peacock.