EU/EEA users have GDPR rights to access, correct, delete, port, and object to their data processing; California users have CCPA rights to know, delete, and opt out of data sale or sharing, and cannot be penalized for exercising these rights.
This analysis describes what Waze's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause operationalizes legal requirements under GDPR and California privacy statutes by confirming Waze's recognition of these jurisdiction-specific rights. This provision establishes the regulatory framework governing how the service provider must respond to user requests for data access, modification, and deletion within these jurisdictions.
The updated policy now applies to users of any age by removing the prior 16+ requirement, but does not explicitly state whether parental consent is required for minors. The policy defines Personal Information more broadly to include location, route information, and data reasonably linked to you by Waze. The company removed documentation of the 'find friends' feature that previously collected phone numbers from device contacts, suggesting that feature is no longer active or has been redesigned. Privacy controls remain available through in-app settings where you can adjust which Personal Information Waze collects and how it is used.
View change record →If you are in the EU/EEA or California, you can request a copy of your data, ask for it to be deleted, or opt out of data sharing for advertising, but these rights require you to proactively submit requests to Waze.
Cross-platform context
See how other platforms handle User Rights for EU/EEA and California Residents and similar clauses.
Compare across platforms →"If you are a resident of the European Economic Area, you have certain rights with respect to your personal data, including the right to access, correct, or delete your personal data, the right to restrict or object to processing, and the right to data portability. If you are a California resident, you have the right to know what personal information we collect, the right to delete your personal information, the right to opt-out of the sale or sharing of your personal information, and the right to non-discrimination for exercising your privacy rights.Excerpt from Waze's Privacy Policy
REGULATORY LANDSCAPE: GDPR Articles 15 through 22 establish the user rights referenced for EU/EEA residents, enforced by the Irish Data Protection Commission as lead supervisory authority for Waze given its Irish entity.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The clause operationalizes legal requirements under GDPR and California privacy statutes by confirming Waze's recognition of these jurisdiction-specific rights. This provision establishes the regulatory framework governing how the service provider must respond to user requests for data access, modification, and deletion within these jurisdictions.
If you are in the EU/EEA or California, you can request a copy of your data, ask for it to be deleted, or opt out of data sharing for advertising, but these rights require you to proactively submit requests to Waze.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Waze.