If you let an exhibitor scan your badge at a Twitch live event, your personal information is handed to that exhibitor and becomes governed by their privacy policy, not Twitch's.
This analysis describes what Twitch's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Once your data is transferred to an exhibitor, Twitch's privacy protections no longer apply; you are subject to the exhibitor's own data practices, which you may not have reviewed or consented to in advance.
Interpretive note: Whether the badge-scan acknowledgment constitutes valid informed consent under GDPR or CCPA depends on how it is implemented in practice at events, which the document does not specify.
Allowing a badge scan at a Twitch live event results in your personal information being transferred to a third-party exhibitor whose privacy practices and data retention policies are unknown and outside Twitch's control or accountability.
How other platforms handle this
Where required by law, we provide adequate protection for the transfer of personal data in accordance with applicable law, such as by obtaining your consent, relying on the European Commission's adequacy decisions, or executing Standard Contractual Clauses. Where relevant, you may request a copy of ...
In connection with any reorganization, restructuring, merger or sale, or other transfer of assets, we will transfer information, including personal information, provided that the receiving party agrees to respect your personal information in a manner that is consistent with our Privacy Policy.
We may transfer to and process your personal information in countries outside of the jurisdiction where you are located for the various purposes described above. When required by law, we will ensure that we rely on an appropriate legal mechanism for the transfer, such as your consent, standard contr...
Monitoring
Twitch has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Exhibitors may offer to scan your badge when you visit their area or events. By allowing exhibitors to scan your badge, you acknowledge that Twitch may transfer your personal information to the exhibitor and that, once transferred, your personal information is subject to the exhibitor's privacy notice, and the exhibitor may contact you directly afterwards.— Excerpt from Twitch's Twitch Privacy Notice
REGULATORY LANDSCAPE: This provision creates a third-party data transfer scenario with potential implications under GDPR for EU/EEA attendees, particularly regarding Article 13/14 transparency requirements at the point of data collection by the exhibitor, and whether the transfer constitutes a controller-to-controller or controller-to-processor arrangement. Under CCPA, this transfer may qualify as a disclosure to a third party and could be characterized as a sale or sharing of personal information depending on whether exhibitors provide consideration. The FTC's authority over deceptive practices is relevant if the disclosure of this transfer is not sufficiently prominent at the point of badge scanning. GOVERNANCE EXPOSURE: Medium. The provision discloses that data transfers to exhibitors occur upon badge scan consent, but places accountability for downstream data use entirely on the exhibitor. This may be insufficient under GDPR's accountability principle, which can require data controllers to implement contractual safeguards even for voluntary disclosures to third parties. JURISDICTION FLAGS: EU/EEA attendees face the highest exposure, as GDPR requires that data subjects be informed of the identity of recipients and the legal basis for transfer at or before the point of collection. California residents may have the right to know about disclosures to third parties and to opt out. The provision's reliance on attendee acknowledgment as the sole mechanism for compliance may be insufficient in these jurisdictions. CONTRACT AND VENDOR IMPLICATIONS: Exhibitor agreements should be reviewed to confirm that exhibitors are contractually bound to provide adequate privacy notices and to use data only for disclosed purposes. The absence of any mention of data processing agreements with exhibitors in the notice is a potential gap. Procurement teams running live events should assess whether current exhibitor onboarding processes include privacy compliance requirements. COMPLIANCE CONSIDERATIONS: Legal teams should evaluate whether the acknowledgment mechanism at the point of badge scanning constitutes valid consent under applicable law, particularly for EU/EEA attendees. The notice should be reviewed to determine whether exhibitor identity and data use categories are communicated to attendees prior to scanning, consistent with GDPR transparency requirements. A review of exhibitor contracts for data protection clauses is recommended.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Once your data is transferred to an exhibitor, Twitch's privacy protections no longer apply; you are subject to the exhibitor's own data practices, which you may not have reviewed or consented to in advance.
Allowing a badge scan at a Twitch live event results in your personal information being transferred to a third-party exhibitor whose privacy practices and data retention policies are unknown and outside Twitch's control or accountability.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Twitch.