Information you enter into TurboTax can be shared with other Intuit products like Credit Karma and used to recommend financial products or show you targeted offers across the Intuit ecosystem.
This analysis describes what TurboTax's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Tax data is among the most sensitive personal information people share digitally, and this clause permits it to flow into advertising and product recommendation systems beyond the original tax-filing purpose.
Interpretive note: The precise scope of data shared across products and the opt-out mechanisms available vary by jurisdiction, and the HTML truncation limits direct quotation of the exact policy language.
The updated privacy statement no longer describes a specific opt-out procedure for advertising cookies that was previously available. The prior version stated users could 'opt out of having your personal information used or disclosed for these purposes by sliding the toggle to No and clicking Save My Choices', but this mechanism and accompanying language are no longer present in the updated disclosure. The updated terms also no longer explicitly state that IP addresses and device identifiers may be shared with advertising partners, removing prior transparency about what data types are disclosed. You should review TurboTax's main Privacy Policy to determine if opt-out mechanisms exist elsewhere or what the current data-sharing practices are.
View change record →The updated terms now explicitly state that TurboTax and its advertising partners use cookies and tracking technologies to deliver targeted advertising on and off TurboTax sites. The policy discloses that IP addresses and device identifiers may be shared with advertising partners to show you more relevant ads, and states these practices may be considered 'targeted advertising' or 'sharing' of personal information under applicable law. You can decline third-party advertising cookies by going to 'Customize Settings,' though essential website cookies required for site functionality cannot be refused.
View change record →Your Social Security number, income figures, and financial account information entered for tax filing purposes may be used by Credit Karma to recommend loans, credit cards, or other financial products, and to personalize marketing you receive across Intuit platforms.
How other platforms handle this
We may share your personal information with our affiliates, meaning entities that control, are controlled by, or are under common control with Consensys. We also share information with service providers who assist in operating our services, subject to confidentiality obligations.
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
Loyalty and partner program companies. We share information with our loyalty and partner program companies, like Ulta Beauty and Marriott.
Monitoring
TurboTax has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We may share your personal information among Intuit's family of companies, including TurboTax, Credit Karma, QuickBooks, and Mailchimp, to provide you with a personalized experience, offer products and services that may interest you, and for other purposes described in this Privacy Statement.— Excerpt from TurboTax's TurboTax Privacy Statement
REGULATORY LANDSCAPE: This provision implicates the Gramm-Leach-Bliley Act, which restricts how nonpublic personal financial information collected by financial institutions may be shared and used, with the FTC as primary enforcement authority for non-bank entities. The CCPA and CPRA also apply to California residents, requiring disclosure and opt-out rights for sharing personal information with affiliated entities for cross-context behavioral advertising. GDPR Article 5 purpose limitation principles are engaged for EU users, as secondary use of tax data for marketing may require a separate lawful basis beyond the original processing consent. GOVERNANCE EXPOSURE: High. The movement of tax-derived sensitive financial data into advertising and recommendation pipelines crosses product contexts in ways that may not satisfy GLBA's privacy notice and opt-out framework or CCPA's sensitive personal information protections. The FTC has historically scrutinized data repurposing practices where consumer reasonable expectations were not met. JURISDICTION FLAGS: California residents have heightened protections under CPRA for sensitive personal information, which includes Social Security numbers and financial account data, and may be entitled to limit the use of such data. EU and UK users are protected by GDPR and UK GDPR purpose limitation requirements. Illinois and other states with comprehensive privacy laws may also constrain this sharing. CONTRACT AND VENDOR IMPLICATIONS: Internal data sharing agreements between Intuit subsidiaries should be reviewed to ensure they satisfy applicable affiliate sharing limitations under GLBA and state privacy laws. B2B clients using QuickBooks or other Intuit products should assess whether their employees' or customers' data could be implicated by this cross-product sharing framework. COMPLIANCE CONSIDERATIONS: Compliance teams should audit the consent mechanisms used to authorize cross-product data sharing, verify that GLBA-required privacy notices and opt-out mechanisms are current and operational, and assess whether CCPA sensitive personal information processing restrictions require additional user controls beyond current disclosures.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Tax data is among the most sensitive personal information people share digitally, and this clause permits it to flow into advertising and product recommendation systems beyond the original tax-filing purpose.
Your Social Security number, income figures, and financial account information entered for tax filing purposes may be used by Credit Karma to recommend loans, credit cards, or other financial products, and to personalize marketing you receive across Intuit platforms.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TurboTax.