Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy authorizes sharing personal information with third-party data brokers, advertising and marketing agencies, analytics providers, and credit agencies that support Thomson Reuters business, as well as with third parties for marketing their own products or services to users.
This analysis describes what Thomson Reuters's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes disclosure of personal information to data brokers and advertising partners, which in combination with the broad categories of personal information collected including browsing activity, usage history, device identifiers, and inferences from personal information, may engage CCPA/CPRA opt-out rights and analogous state law protections for users in applicable jurisdictions.
Under this clause, Thomson Reuters may share personal information including usage history, device identifiers, and behavioral inferences with data brokers, advertising agencies, analytics providers, and credit agencies, as well as with third parties to market their own products to users. Eligible users may opt out of such sharing through the mechanisms described in the statement.
Cross-platform context
See how other platforms handle Data Sharing with Data Brokers and Advertising Partners and similar clauses.
Compare across platforms →Monitoring
Thomson Reuters has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Third-party business partners that support our business, such as our content and other partners, vendors and subcontractors, analytics providers, advertising and marketing agencies, credit agencies, and other third parties we engage. Third parties to market their products or services to you.Excerpt from Thomson Reuters's Privacy
1) REGULATORY LANDSCAPE: CCPA/CPRA defines 'sharing' to include disclosure of personal information for cross-context behavioral advertising, which engages opt-out rights independent of monetary consideration. Sharing with data brokers may trigger obligations under California's Delete Act (SB 362), which requires data brokers to register with the California Privacy Protection Agency and honor deletion requests submitted through a centralized platform. The FTC Act engages general consumer protection obligations regarding the accuracy and use of shared data. 2) GOVERNANCE EXPOSURE: Medium to High. The combination of broad personal data categories, sharing with data brokers and advertising partners, and acknowledged potential sale creates a multi-framework compliance matrix. The statement publishes annual California consumer request metrics as required by CCPA regulations, indicating an operational compliance program, but the adequacy of data broker disclosure and Delete Act compliance warrants independent assessment. 3) JURISDICTION FLAGS: California's Delete Act (SB 362) creates specific obligations for data broker registration and deletion request processing. Virginia, Colorado, and other state privacy laws impose targeted advertising opt-out rights. EU and UK users' data shared with advertising and analytics partners may require lawful basis documentation under GDPR and UK GDPR, including for transfers to U.S.-based advertising networks. 4) CONTRACT AND VENDOR IMPLICATIONS: Organizations whose employee data flows through Thomson Reuters platforms should review whether their data processing agreements restrict downstream sharing with data brokers and advertising partners. Vendor assessments should confirm whether Thomson Reuters' advertising partner disclosures satisfy applicable contractual and regulatory disclosure requirements. 5) COMPLIANCE CONSIDERATIONS: Legal teams should verify whether Thomson Reuters is registered as a data broker in California and other states that require registration, and whether its Delete Act obligations are being fulfilled. Consent and preference management systems should be audited to confirm that opt-out signals transmitted by users are honored across all downstream advertising and analytics partners.
This provision authorizes disclosure of personal information to data brokers and advertising partners, which in combination with the broad categories of personal information collected including browsing activity, usage history, device identifiers, and inferences from personal information, may engage CCPA/CPRA opt-out rights and analogous state law protections for users in applicable jurisdictions.
Under this clause, Thomson Reuters may share personal information including usage history, device identifiers, and behavioral inferences with data brokers, advertising agencies, analytics providers, and credit agencies, as well as with third parties to market their own products to users. Eligible users may opt out of such sharing through the mechanisms described in the statement.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Thomson Reuters.