Telegram justifies collecting and using your data by saying it needs to do so to run the service and prevent fraud, without asking for your explicit consent.
This analysis describes what Telegram's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Relying on legitimate interests rather than consent means Telegram does not need to ask your permission to collect and process data, though you have the right to object to such processing under GDPR.
Interpretive note: Whether Telegram's legitimate interests assertion satisfies the GDPR Article 6(1)(f) balancing test in all processing contexts depends on the undisclosed legitimate interests assessment and may be subject to challenge by supervisory authorities.
Removal of this provision eliminates explicit disclosure of the legal basis ('legitimate interests') for Telegram's metadata collection practices under GDPR.
View full change record →Because Telegram relies on legitimate interests rather than consent, users are not presented with a consent choice for most data processing; however, GDPR gives users in the EEA and UK the right to object to processing based on legitimate interests, which they can exercise by contacting Telegram's EEA representative.
How other platforms handle this
to object to profiling activities based on our own legitimate interests
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
"We process your personal data on the ground that such processing is necessary to further our legitimate interests (including: (1) providing effective and innovative Services to our users; and (2) to detect, prevent or otherwise address fraud or security issues in respect of our provision of Services), unless those interests are overridden by your interest or fundamental rights and freedoms that require protections of personal data.Excerpt from Telegram's Privacy Policy
REGULATORY LANDSCAPE: Legitimate interests as a legal basis is governed by GDPR Article 6(1)(f), which requires a three-part test: identification of a legitimate interest, necessity of the processing, and a balancing test confirming the controller's …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Relying on legitimate interests rather than consent means Telegram does not need to ask your permission to collect and process data, though you have the right to object to such processing under GDPR.
Because Telegram relies on legitimate interests rather than consent, users are not presented with a consent choice for most data processing; however, GDPR gives users in the EEA and UK the right to object to processing based on legitimate interests, which they can exercise by contacting Telegram's EEA representative.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Telegram.