Spotify builds a profile of inferences about who you are — including your estimated age, interests, and preferences — based on how you use the service.
Spotify creates inferred profiles about your age, interests, and preferences from your listening and usage behavior, and these inferences are used to target you with advertising — this profiling occurs even if you have not directly provided this information to Spotify.
How other platforms handle this
We may engage third-party companies or individuals as service providers or business partners to process Information and support our business. These third parties may, for example, provide virtual computing and storage services, assist Slack with verifying Owners and Customers, or we may share busine...
European Commission's Standard Contractual Clauses. Slack uses Standard Contractual Clauses approved by the European Commission (and the equivalent standard contractual clauses for the UK where appropriate) for transfers to, among others, Australia, Canada, India, Japan, South Korea, and the United ...
11 Inferences Conclusions that could be used to create a profile reflecting an individual's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, aptitude. YES. YES
Inferences derived from your behavior create a detailed personal profile that can be used for advertising targeting, and may not be obvious to users who think they are simply listening to music.
1) REGULATORY FRAMEWORK: Inference generation from usage data implicates CCPA/CPRA (Cal. Civ. Code §1798.140(o) — 'personal information' includes inferences drawn from information to create a profile; §1798.100 right to know extends to inferences); Virginia VCDPA §59.1-575 (profiling definition includes inferences); Colorado CPA §6-1-1303 (profiling for decisions producing legal or similarly significant effects); FTC Act Section 5 regarding profiling without adequate consumer notice. CPPA and FTC are primary enforcement authorities. 2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.