10 Total
2 High severity
8 Medium severity
0 Low severity
Summary

Target's privacy policy describes how Target collects and uses personal information across its stores, website, mobile app, Target Circle loyalty program, Target Plus marketplace, and RedCard financial products. The policy states that Target collects identifiers, payment information, biometric data including face geometry from beauty try-on tools, precise geolocation, browsing activity, purchase history, and inferences about consumer preferences, and authorizes sharing this data with advertising and analytics partners, marketplace sellers, and loyalty program partners. California residents and residents of several other states are granted specific rights to access, correct, delete, or opt out of the sale or sharing of their personal information through mechanisms described in the policy.

Technical / Legal Breakdown

This document is Target Corporation's privacy policy governing the collection, use, sharing, and retention of personal information across Target's retail, digital, and loyalty program ecosystems, with stated legal bases including consent, contractual necessity, and compliance with applicable law. The policy states that Target collects identifiers, contact information, payment card data, biometric identifiers (including face geometry data from beauty try-on features), precise geolocation, browsing and search history, purchase history, inferences drawn from personal information, and sensitive personal information such as health-related data; the terms authorize sharing of this data with advertising partners, analytics providers, data brokers operating as service providers, Target Plus marketplace sellers, and loyalty program partners including Ulta Beauty and Marriott. Notably, the policy discloses the collection of biometric identifiers and face geometry data in connection with augmented reality beauty features, which engages state biometric privacy statutes (including the Illinois Biometric Information Privacy Act and similar laws in Texas and Washington) that impose consent, retention, and destruction obligations that may constrain how the terms apply in practice. The policy engages the California Consumer Privacy Act as amended by CPRA, state consumer protection statutes, and the FTC Act; California residents receive enumerated rights including the right to know, correct, delete, opt out of sale or sharing, and limit use of sensitive personal information, while residents of additional states including Colorado, Connecticut, Virginia, and others receive analogous state-law rights under frameworks the policy acknowledges by reference to a state privacy rights table.

Institutional Analysis

Institutional analysis available with Compliance

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.

Start Compliance free trial

12 important changes detected

12 versions captured · Last updated: May 2026

What changed Target updated its privacy policy on May 16, 2026, by modifying footer navigation and promotional content. The previous version included links to 'Gift Ideas for Mom', 'Last update: March 5, 2026', and references to updated privacy categories and retention information. The updated version replaces these with different promotional categories including 'Gift Ideas for Dad' and 'Back to School', and removes the explicit update date reference and summary of what was changed. This appears to be a navigation and content reorganization rather than a substantive change to Target's privacy rights, practices, or obligations.
Why this matters This change is a formatting and navigation update to Target's privacy policy footer and does not modify the substantive privacy rights, data collection practices, or consumer obligations stated in the policy. The removal of the 'Last update: March 5, 2026' date reference means the policy footer no longer explicitly displays when the document was last revised, though the policy content itself remains operative. The reorganization of promotional categories in the footer has no effect on how Target collects, uses, or protects consumer data.
View full change record →
What changed Target's privacy policy homepage was updated on May 11, 2026 to add a timestamp and navigation links. The policy now displays 'Last update: March 5, 2026' and includes explicit references to updated categories of information collected, state-specific privacy information, and retention information, with a 'Back to Top' navigation option. This change appears to be a transparency and navigation update rather than a material change to substantive privacy rights or data handling practices.
Why this matters The updated policy homepage now displays a last-updated timestamp and provides clearer navigation to sections describing what information Target collects, state-specific privacy rights, and data retention practices. This is a structural and transparency change to the policy document itself rather than a change to data handling practices or user rights. You can access these sections directly through the new navigation links provided on the policy page.
View full change record →

May 6, 2026 low

Target's privacy policy was updated on May 6, 2026 with minor changes to webpage content and formatting. One sentence was added and one was modified in the policy document. These …

View change record →
May 2, 2026 low

Target's privacy policy was updated on May 2, 2026 with minor editorial changes: one sentence was removed and one sentence was modified. The document now contains 290 sentences. Based on …

View change record →
April 19, 2026 low

Target updated the promotional content examples in their privacy policy's introductory section on April 19, 2026. The change replaced references to 'Easter Basket Ideas' and 'Health & Wellness' with 'Gift …

View change record →
April 13, 2026 low

Target modified one sentence in its privacy policy on April 13, 2026. The specific language change was not detailed in the change summary provided. Without visibility into the exact text …

View change record →
April 8, 2026 low

Target removed the word 'Health &' from a navigation menu in their privacy policy on April 8, 2026. The section previously read 'Health & Wellness' and now reads 'Wellness'. This …

View change record →
April 7, 2026 low

Target removed two promotional gift-idea categories (Easter Basket Ideas and Gift Ideas for Grads) from the navigation menu in their privacy policy document. This appears to be a formatting or …

View change record →
April 6, 2026 low

Target's privacy policy navigation menu was updated on April 6, 2026 to include a new shopping category link for 'Gift Ideas for Grads' in the page header. This is a …

View change record →
April 1, 2026 low

Target's privacy policy was updated on April 1, 2026, but the detected change appears to be a formatting or navigation element addition rather than a substantive policy modification. The update …

View change record →
March 20, 2026 low

Target's privacy policy update on March 20, 2026 involved removing a line of unrelated marketing content (Easter, Gift Ideas, Deals promotions) and modifying how sponsored content appears in the document. …

View change record →
March 19, 2026 low

Target's privacy policy was updated on March 19, 2026 with minor editorial changes to the policy interface. One sentence was removed from a 'Loading' placeholder section, and new content describing …

View change record →
High — 2 provisions
Medium — 8 provisions

Monitoring

Target has updated this document before.

Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →

Compliance Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Compliance free trial

Cross-platform context

See how other platforms handle Biometric Data Collection and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 16, 2026 00:30 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000260
Version ID CA-V-002670
SHA-256 9b69ef16f12c45f0ccc155680031991e0659fafff71f377000a12dc17277cd98
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans