Provision record
Waze · Waze Privacy Policy · View original document ↗

GDPR and Regional Privacy Rights

Medium severity High confidence Explicit document language Common · 290 of 352 platforms
Stay ahead of the changes
Track Waze and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

Users in the EU, EEA, or UK can request access to, correction, or deletion of their personal data, ask Waze to stop processing it in certain circumstances, and complain to their national data protection regulator.

This analysis describes what Waze's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision formally acknowledges the GDPR and UK GDPR rights framework for European and UK users, establishing an avenue for data subjects to exercise statutory rights directly against Waze.

Recent Activity

This document changed recently

Medium Jul 9, 2026

The updated policy now applies to users of any age by removing the prior 16+ requirement, but does not explicitly state whether parental consent is required for minors. The policy defines Personal Information more broadly to include location, route information, and data reasonably linked to you by Waze. The company removed documentation of the 'find friends' feature that previously collected phone numbers from device contacts, suggesting that feature is no longer active or has been redesigned. Privacy controls remain available through in-app settings where you can adjust which Personal Information Waze collects and how it is used.

View change record →

Clause Stability Mostly Stable

1
Change
5
Months Monitored
May 12, 2026
First Seen
May 22, 2026
Last Seen
This clause type exists across 5149 other provisions on other platforms.
This clause has changed once in 5 months of monitoring.

Change history

added Jul 9, 2026

Separates GDPR rights into dedicated provision with specific detail about EEA/UK applicability, data portability rights, and supervisory authority complaint mechanisms absent from previous generic formulation.

View full change record →

Consumer impact (what this means for users)

EU, EEA, and UK users have legally-grounded rights to access, correct, delete, or restrict the processing of their personal data held by Waze, and can escalate complaints to their national data protection authority if those rights are not honored.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    EU, EEA, and UK users can submit a data access or deletion request through the Waze app Settings menu under Privacy, or contact Waze support directly through the in-app help channel to initiate a formal data subject access request.

How other platforms handle this

Google Cloud Medium

When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).

Notion Medium

Not be Discriminated Against by us for exercising your privacy rights.

Square Medium

You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
If you are located in the European Economic Area or the United Kingdom, you have certain rights under applicable data protection laws, including the right to access, correct, or delete your personal data, the right to object to or restrict processing, and the right to data portability. You may also have the right to lodge a complaint with your local supervisory authority.

Excerpt from Waze's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

1) REGULATORY LANDSCAPE: This provision reflects GDPR Articles 15 through 22 (data subject rights) and their UK GDPR equivalents.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable regulations

CCPA/CPRA
California, USA
Colorado AI Act
US-CO
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
Waze Privacy Policy
Entity
Waze
Document last updated
May 5, 2026
Tracking information
First tracked
May 11, 2026
Last verified
May 12, 2026
Record ID
CA-P-010889
Document ID
CA-D-00323
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
20ecc6f25312a12f14c0e0f1ef34ac6de707e4dff155d666a54730feec8142c3
Analysis generated
May 11, 2026 22:53 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Waze
Document: Waze Privacy Policy
Record ID: CA-P-010889
Captured: 2026-05-11 22:53:58 UTC
SHA-256: 20ecc6f25312a12f…
URL: https://conductatlas.com/platform/waze/waze-privacy-policy/provision/CA-P-010889/gdpr-and-regional-privacy-rights/
Accessed: Sept. 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Waze's GDPR and Regional Privacy Rights clause do?

This provision formally acknowledges the GDPR and UK GDPR rights framework for European and UK users, establishing an avenue for data subjects to exercise statutory rights directly against Waze.

How does this clause affect you?

EU, EEA, and UK users have legally-grounded rights to access, correct, delete, or restrict the processing of their personal data held by Waze, and can escalate complaints to their national data protection authority if those rights are not honored.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.

Is ConductAtlas affiliated with Waze?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Waze.