Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The US Supplement states that Samsung may use personal information about US residents to develop and train its artificial intelligence algorithms and models, in addition to the purposes described in the main policy. The document does not specify which categories of personal information are eligible for AI training use or whether separate consent is required.
This analysis describes what Samsung's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision appears only in the US Supplement rather than the main policy body, and the document does not limit the categories of personal information that may be applied to AI training. Compliance teams should evaluate whether this disclosure satisfies notice and secondary-use consent requirements under applicable state privacy laws, particularly in states that require explicit consent or opt-out mechanisms for secondary processing.
Interpretive note: The provision does not specify which categories of personal information are eligible for AI training use, and whether existing opt-out mechanisms under state law extend to AI training as a secondary purpose is not clarified in the document.
The updated policy expands Samsung's data collection authority to include device registration, verification for repairs, and configuration of device settings. The terms now explicitly state that Samsung may collect card and transaction information if you apply for a Samsung-branded payment card. Samsung clarified that it will only send personalized marketing when you have provided consent, where required by law. The policy removed its previous statement that defective devices are wiped of personal information before analysis; the updated terms now state Samsung will analyze returned defective devices without that explicit pre-analysis data deletion commitment. For US residents, the policy now discloses rights to opt out of sale of personal information, sharing for cross-context behavioral advertising, targeted advertising processing, sensitive data collection or processing, and to request lists of third parties receiving your information.
View change record →The US Supplement authorizes Samsung to use personal information collected from US residents to develop and train AI algorithms and models. The document does not specify which personal information categories are included in this use, and no separate consent mechanism for AI training is described in the policy text.
Cross-platform context
See how other platforms handle AI Training Use of US Resident Personal Information and similar clauses.
Compare across platforms →Monitoring
Samsung has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"In addition to the purposes described above in the HOW DO WE USE YOUR INFORMATION SECTION? we may also use personal information about United States residents for other purposes, such as to develop and train our artificial intelligence algorithms and models.Excerpt from Samsung's Privacy Policy
1. REGULATORY LANDSCAPE: This provision implicates the California Consumer Privacy Act and California Privacy Rights Act, which govern secondary uses of personal information and may require businesses to disclose specific categories used for AI training. Analogous state privacy laws in Virginia, Colorado, Texas, and other states with comprehensive privacy frameworks may similarly require disclosure or opt-out mechanisms for secondary processing. The FTC exercises federal enforcement authority and has issued guidance on AI-related data practices. Where applicable state law requires a separate consent or opt-out mechanism for AI training use, the current disclosure-only approach in the US Supplement may require evaluation. 2. GOVERNANCE EXPOSURE: High. The provision authorizes AI training use of US resident personal information without specifying which data categories are in scope, without describing whether users are given a specific opt-out mechanism for this use, and without clarifying whether this use is considered a sale or sharing under applicable state law. This creates exposure under state comprehensive privacy statutes that may require explicit disclosure, purpose limitation, or opt-out rights for secondary uses. 3. JURISDICTION FLAGS: California, Colorado, Virginia, Connecticut, Texas, and other states with comprehensive consumer privacy laws create heightened exposure. States that have enacted specific AI transparency or automated decision-making requirements may impose additional obligations. The EU and UK GDPR would require a clear legal basis for AI training use if any EEA or UK resident data were processed in this manner; the provision is expressly scoped to US residents only. 4. CONTRACT AND VENDOR IMPLICATIONS: Organizations procuring Samsung devices or services for enterprise use should evaluate whether Samsung's AI training use of employee or customer data collected through Samsung services triggers data processing agreement obligations or conflicts with internal data governance policies. The provision does not describe whether Samsung's AI training use involves third-party AI vendors, which may implicate subprocessor disclosure requirements under applicable law. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether the current disclosure in the US Supplement constitutes adequate notice under applicable state privacy laws given its placement in a supplemental section rather than the main policy. Data mapping updates may be warranted to reflect AI training as a downstream use of collected personal information. Consent mechanism audits should evaluate whether existing consent flows capture AI training use as a disclosed purpose.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision appears only in the US Supplement rather than the main policy body, and the document does not limit the categories of personal information that may be applied to AI training. Compliance teams should evaluate whether this disclosure satisfies notice and secondary-use consent requirements under applicable state privacy laws, particularly in states that require explicit consent or opt-out mechanisms …
The US Supplement authorizes Samsung to use personal information collected from US residents to develop and train AI algorithms and models. The document does not specify which personal information categories are included in this use, and no separate consent mechanism for AI training is described in the policy text.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Samsung.