The CCPA disclosure table states that StockX has collected and shared sensitive personal information including Social Security numbers, VAT identification numbers, tax identification numbers, and government-issued identification numbers with service providers, identity verification providers, business partners, professional advisors, affiliates, and government entities.
This analysis describes what StockX's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses that sensitive personal information, including Social Security numbers, is shared with business partners and professional advisors in addition to identity verification and law enforcement contexts. CCPA imposes specific limitations on the use and disclosure of sensitive personal information, and compliance teams should evaluate whether the disclosed sharing practices satisfy CCPA's restrictions on sensitive data processing.
Interpretive note: The policy's assertion that sensitive personal information sharing occurs only when required under CCPA's right-to-limit framework or for legal purposes may not fully align with the breadth of recipients listed in the CCPA disclosure table, creating interpretive uncertainty about the actual scope of sharing.
The updated policy authorizes StockX to share and sell personal information to a broader range of recipients than previously disclosed. Specifically, the policy now explicitly permits sharing or selling personal data, including identifiers, transaction data, and browsing behavior, to Live Sellers on the Live Shopping Platform, Sellers on the Listings Marketplace, and third-party data brokers. The prior version limited disclosures to 'sharing' with 'StockX Verified Sellers' without explicit reference to data sales or data brokers. Under the revised terms, data sale and sharing is now standard practice for analytics, advertising, and marketplace partners. The policy does not describe a consumer opt-out mechanism for this data sharing or selling.
View change record →The agreement states that sensitive personal information including Social Security numbers and government-issued identification numbers has been shared with a defined set of recipients including business partners and professional advisors. Under CCPA, consumers have the right to limit the use and disclosure of sensitive personal information, which the policy acknowledges applies to these data categories.
Cross-platform context
See how other platforms handle Sensitive Personal Information Sharing Including Social Security Numbers and similar clauses.
Compare across platforms →"Sensitive Personal Information Social Security Number VAT ID tax identification number governmental-issued identification number We only collect and share sensitive personal information such as your social security number to which the right to limit use and disclosure applies under the CCPA or when it is required for legal purposes (such as identity verification and fraud prevention) Yes service providers identity verification service providers security and fraud prevention service providers business partners professional advisors affiliates government entitiesExcerpt from StockX's Privacy Policy
1) REGULATORY LANDSCAPE: This provision directly engages CCPA's sensitive personal information framework, which grants consumers the right to limit the use and disclosure of categories including government identification numbers and financial account information.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision discloses that sensitive personal information, including Social Security numbers, is shared with business partners and professional advisors in addition to identity verification and law enforcement contexts. CCPA imposes specific limitations on the use and disclosure of sensitive personal information, and compliance teams should evaluate whether the disclosed sharing practices satisfy CCPA's restrictions on sensitive data processing.
The agreement states that sensitive personal information including Social Security numbers and government-issued identification numbers has been shared with a defined set of recipients including business partners and professional advisors. Under CCPA, consumers have the right to limit the use and disclosure of sensitive personal information, which the policy acknowledges applies to these data categories.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by StockX.