Walmart shares customer data including browsing activity, purchase history, and inferences with advertising partners through Walmart Connect, and acknowledges this may count as selling your data under California law, giving California residents the right to opt out.
This analysis describes what Walmart's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The notice's acknowledgment that Walmart Connect data flows may constitute a 'sale' or 'sharing' under CCPA/CPRA triggers opt-out rights for California residents and GPC signal recognition obligations for Walmart's digital properties.
Interpretive note: The document was partially truncated in the source provided; the exact verbatim excerpt is reconstructed from the notice's disclosed structure and may not reproduce the precise word-for-word text of the published policy.
The policy states that Walmart shares identifiers, purchase history, browsing activity, and consumer inferences with third-party advertising partners through Walmart Connect, and that this activity may constitute a sale or sharing of personal information, requiring Walmart to provide and honor opt-out mechanisms for California residents.
Cross-platform context
See how other platforms handle Data Sale and Sharing via Walmart Connect and similar clauses.
Compare across platforms →Monitoring
Walmart has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We may share your personal information with our advertising partners, including through our Walmart Connect advertising platform. This sharing of data with third-party advertising partners may constitute a 'sale' or 'sharing' of personal information under California law. You have the right to opt out of the sale or sharing of your personal information.— Excerpt from Walmart's Walmart Privacy Policy
1) REGULATORY LANDSCAPE: This provision directly implicates the CCPA as amended by the CPRA, enforced by the California Privacy Protection Agency and the California Attorney General. CPRA regulations require that businesses honor opt-out preference signals including the Global Privacy Control. The FTC's framework on data brokers and unfair or deceptive practices is also relevant to the accuracy and accessibility of the opt-out mechanism. 2) GOVERNANCE EXPOSURE: High. The disclosure that Walmart Connect advertising data flows may constitute a sale or sharing of personal information triggers mandatory opt-out infrastructure, annual opt-out renewal limits, and restrictions on re-engaging opted-out consumers without a new affirmative authorization. Non-compliance with GPC signal recognition obligations has been the subject of enforcement actions by the California AG. 3) JURISDICTION FLAGS: California creates the primary exposure due to CPRA's definition of 'sharing' for cross-context behavioral advertising. Colorado, Connecticut, Virginia, Texas, and other states with enacted comprehensive privacy statutes have analogous opt-out rights for targeted advertising that Walmart's notice should address. The provision's applicability in non-US jurisdictions is not addressed in this document. 4) CONTRACT AND VENDOR IMPLICATIONS: Compliance teams should verify that all Walmart Connect advertising partners are operating under written service provider or contractor agreements with appropriate use restrictions, rather than as independent recipients whose data access constitutes an uncontracted third-party transfer. Agreements with advertising partners should prohibit further sale of received data. 5) COMPLIANCE CONSIDERATIONS: Teams should audit whether GPC signals are recognized across all Walmart digital properties including the mobile app, third-party embedded Walmart experiences, and the Walmart.com marketplace. Data mapping should identify all third-party advertising partners receiving customer data through Walmart Connect and categorize each transfer as service provider, contractor, or third-party under CPRA.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The notice's acknowledgment that Walmart Connect data flows may constitute a 'sale' or 'sharing' under CCPA/CPRA triggers opt-out rights for California residents and GPC signal recognition obligations for Walmart's digital properties.
The policy states that Walmart shares identifiers, purchase history, browsing activity, and consumer inferences with third-party advertising partners through Walmart Connect, and that this activity may constitute a sale or sharing of personal information, requiring Walmart to provide and honor opt-out mechanisms for California residents.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Walmart.