Spotify receives data about you from advertising partners and uses it to target you with ads, meaning companies you have never interacted with through Spotify can influence the ads you see.
Third-party advertising companies provide Spotify with information about your interests from outside the platform, which Spotify combines with your listening data to serve you targeted ads — this cross-platform profiling is opt-out by default.
How other platforms handle this
Drivers and delivery people can exercise data rights including the right to access personal data held about them, the right to request correction of inaccurate data, the right to request deletion of their data (subject to legal retention obligations), the right to object to processing, and the right...
To Comply With Our Legal Obligations. We may disclose your information with courts, law enforcement authorities, regulators, attorneys or other parties: (A) to comply with laws and legal obligations; (B) for the establishment, exercise, or defense of a legal or equitable claim; (C) to respond to law...
We may share the information we collect with companies that provide support services to us (such as printers, email providers, mobile marketing services, analytics providers, web hosting providers, call center/chat providers, sweepstakes vendors, payment processors, coupon delivery vendors, data enh...
Advertising partners supply Spotify with data about your interests and behaviors from outside the Spotify platform, creating a more detailed combined profile than Spotify could build alone — and this happens without most users being aware of it.
1) REGULATORY FRAMEWORK: Receipt of personal data from advertising partners for targeting purposes implicates CPRA §1798.120 (sharing for cross-context behavioral advertising requires opt-out right); CCPA §1798.115 (right to know categories of third parties to whom personal information is disclosed); FTC Act Section 5 (deceptive practices regarding third-party data use); the FTC's 2014 Data Broker Report recommendations; and state privacy laws in Virginia (VCDPA §59.1-578), Colorado (CPA §6-1-1306), Connecticut (CTDPA §42-520), and Texas (TDPSA §541.052). CPPA and FTC are primary enforcement authorities. 2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.