Provision record
Spotify · Spotify Privacy Policy · View original document ↗

Annual Privacy Request Metrics Disclosure

Unique · 0 of 343 platforms
Stay ahead of the changes
Track Spotify and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

Generated by a model from the captured document; not read by a person

The policy publishes global privacy request statistics for 2025, disclosing that Spotify received over 13 million privacy rights requests across four categories, complied with nearly all, and averaged response times ranging from 1 day for tailored advertising opt-outs to 23.4 days for correction requests.

ⓘ

This analysis describes what Spotify's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Generated by a model from the captured document; not read by a person

This provision constitutes a transparency disclosure of operational privacy rights fulfillment at scale, and the metrics indicate that deletion and opt-out requests are being processed at high volume with near-complete compliance rates, which is operationally significant for assessing the functioning of Spotify's rights fulfillment infrastructure.

Cross-platform context

See how other platforms handle Annual Privacy Request Metrics Disclosure and similar clauses.

Compare across platforms →
▸ View Original Clause Language DOCUMENT RECORD
"
The following chart contains statistics about global requests we received from users between 1 January and 31 December 2025: Type of request Received Complied Denied Average response rate Right to Know / Access 1,498,726 1,498,724 2 3.89 days Request to Delete 8,260,593 8,260,593 0 15.47 days Request to Correct* 512 428 84 23.4 days Request to Opt-Out of Data Sharing for Tailored Ads 3,379,178 3,379,178 0 1 day

Excerpt from Spotify's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

1.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • State AG
    The California Privacy Protection Agency and California Attorney General hold enforcement authority over CCPA annual privacy metrics reporting requirements
    File a complaint →

Provision details

Document information
Document
Spotify Privacy Policy
Entity
Spotify
Date stated by the document
July 1, 2026
As printed in Spotify’s text (version CA-V-007554), not a ConductAtlas date.
Tracking information
First captured by ConductAtlas
March 6, 2026
Text quoted from version
CA-V-007554, captured Oct. 16, 2026
Document ID
CA-D-000036
Evidence Provenance
Source URL
Wayback Machine
Archived bytes SHA-256 (version CA-V-007554)
da37ca0430bb3c08a9a71eed868dcfbaeb91bee556ad70518a471ce0d159958b
Analysis generated
October 16, 2026 02:15 UTC
Methodology
Evidence
Excerpt not yet checked against a stored version
Citation Record
Entity: Spotify
Document: Spotify Privacy Policy
Version: CA-V-007554
Captured: 2026-10-16 00:10:49 UTC
SHA-256: da37ca0430bb3c08…
URL: https://conductatlas.com/platform/spotify/spotify-privacy-policy/annual-privacy-request-metrics-disclosure/
Accessed: Oct. 24, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Categories

Other risks in this policy

Get the weekly coverage letter

Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.

Frequently Asked Questions

What does Spotify's Annual Privacy Request Metrics Disclosure clause do?

This provision constitutes a transparency disclosure of operational privacy rights fulfillment at scale, and the metrics indicate that deletion and opt-out requests are being processed at high volume with near-complete compliance rates, which is operationally significant for assessing the functioning of Spotify's rights fulfillment infrastructure.

Is ConductAtlas affiliated with Spotify?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Spotify.