Waze states that once your data is combined with others and stripped of identifying details, it is no longer considered personal information under this policy and can be shared with any party for any purpose without restriction.
This analysis describes what Waze's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision asserts a broad carve-out from the policy's privacy protections for aggregated or de-identified data, and does not specify a standard for what constitutes adequate de-identification or describe safeguards against re-identification.
Interpretive note: The policy does not specify the de-identification standard applied; under GDPR, data that Waze treats as anonymous may still constitute personal data if re-identification is reasonably possible, meaning the practical scope of this carve-out is legally uncertain in EU/EEA jurisdictions.
The updated policy now applies to users of any age by removing the prior 16+ requirement, but does not explicitly state whether parental consent is required for minors. The policy defines Personal Information more broadly to include location, route information, and data reasonably linked to you by Waze. The company removed documentation of the 'find friends' feature that previously collected phone numbers from device contacts, suggesting that feature is no longer active or has been redesigned. Privacy controls remain available through in-app settings where you can adjust which Personal Information Waze collects and how it is used.
View change record →Previous version titled 'Anonymized and Aggregated Driving Data Use' with no excerpt; current version renamed and now explicitly states such data is not subject to privacy policy restrictions.
View full change record →The policy states that data Waze determines to be aggregated or de-identified falls outside the scope of its privacy commitments and can be shared without restriction; the practical scope of this carve-out depends on the de-identification standard applied, which the policy does not specify.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"We may use aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for any purpose, including sharing it with partners, advertisers, and other third parties. This information is not subject to the restrictions in this Privacy Policy.Excerpt from Waze's Privacy Policy
1) REGULATORY LANDSCAPE: GDPR does not exempt truly anonymous data from its scope, but the determination of whether data is genuinely anonymized (rather than merely pseudonymized) requires a high standard under the Article 29 Working …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision asserts a broad carve-out from the policy's privacy protections for aggregated or de-identified data, and does not specify a standard for what constitutes adequate de-identification or describe safeguards against re-identification.
The policy states that data Waze determines to be aggregated or de-identified falls outside the scope of its privacy commitments and can be shared without restriction; the practical scope of this carve-out depends on the de-identification standard applied, which the policy does not specify.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Waze.