Smartsheet states it does not intentionally collect data from users under 16, and will delete any such data if discovered.
This analysis describes what Smartsheet's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The 16-year age threshold is stricter than COPPA's 13-year requirement in the US, but parents or guardians whose children may have accessed Smartsheet should know the service is not intended for minors.
The updated privacy policy states that only Smartsheet's U.S.-based affiliates participate in the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Framework. Previously, the policy referenced participation by Smartsheet and its affiliates without geographic qualification. This narrowed scope may affect the data transfer mechanisms available for processing personal data from EU, UK, and Swiss users if non-U.S. affiliates are involved in data handling. The policy does not explicitly describe alternative transfer mechanisms for non-U.S. affiliates.
View change record →Removal of children's data protection provision eliminates explicit commitment to comply with child data protection requirements under GDPR and COPPA, potentially creating legal and ethical concerns.
View full change record →Smartsheet sets its minimum age at 16, which is above the COPPA threshold of 13 in the US, meaning the service is not intended for use by teenagers under 16 and any data collected from them would be subject to deletion.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"Our Site and Services are not directed to children under the age of 16 and we do not knowingly collect personal data from children under 16. If we learn that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information as soon as possible.Excerpt from Smartsheet's Privacy Policy
(1) REGULATORY LANDSCAPE: COPPA in the US applies to online services directed to children under 13, requiring verifiable parental consent before collecting personal data.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The 16-year age threshold is stricter than COPPA's 13-year requirement in the US, but parents or guardians whose children may have accessed Smartsheet should know the service is not intended for minors.
Smartsheet sets its minimum age at 16, which is above the COPPA threshold of 13 in the US, meaning the service is not intended for use by teenagers under 16 and any data collected from them would be subject to deletion.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Smartsheet.