Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that users in the EU, UK, Israel, and Brazil have rights to access, update, correct, delete, restrict, and export their data, and to object to processing, with requests submitted to privacy@waze.com.
This analysis describes what Waze's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the operational mechanism for exercising data subject rights under GDPR, UK GDPR, Israeli data protection law, and LGPD, including the contact point and the data export process available through the Waze website dashboard.
The updated policy now applies to users of any age by removing the prior 16+ requirement, but does not explicitly state whether parental consent is required for minors. The policy defines Personal Information more broadly to include location, route information, and data reasonably linked to you by Waze. The company removed documentation of the 'find friends' feature that previously collected phone numbers from device contacts, suggesting that feature is no longer active or has been redesigned. Privacy controls remain available through in-app settings where you can adjust which Personal Information Waze collects and how it is used.
View change record →Under this clause, users in the EU, UK, Israel, and Brazil can submit requests to access, correct, delete, restrict, or export their Waze account data by contacting privacy@waze.com or by using the in-app and website controls described in the policy. A registered account with a valid email address is required to use the data archive download function.
Cross-platform context
See how other platforms handle Data Subject Rights (EU, UK, Israeli, and Brazilian Users) and similar clauses.
Compare across platforms →Monitoring
Waze has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If the European Union (EU), United Kingdom (UK) or Israel's data protection law applies to the processing of your information, we provide the controls described in this policy so you can exercise your right to request access to, review, update, correct, remove, delete, and restrict the processing of your information. You can also export a copy of data in your Waze account if you want to back it up or export your information to another service. You can log in to the dashboard by going to the Waze website , then Settings, then choose Download your data archive. Note that in order to access the dashboard you will need a Waze account with a valid email address to receive your data archive. You also have the right to object to the processing of your information. If you have questions or requests related to your rights, you can contact Waze and our data protection office at: privacy@waze.com .Excerpt from Waze's Privacy Policy
1) REGULATORY LANDSCAPE: This provision directly implements GDPR Articles 15 through 22 data subject rights obligations, UK GDPR equivalent rights, Brazilian LGPD Articles 17 through 22, and Israeli data protection law access and correction rights. The policy names privacy@waze.com as the contact point for rights requests and references a data protection office. Enforcement authorities include EU national data protection authorities, the UK ICO, Brazil's ANPD, and Israel's Privacy Protection Authority. 2) GOVERNANCE EXPOSURE: Low. The provision explicitly names the contact mechanism and outlines the categories of rights available, which represents a baseline transparency disclosure consistent with regulatory requirements. The operational adequacy of response timelines and processes is not specified in the policy, which may warrant procedural review. 3) JURISDICTION FLAGS: EU and UK users have the most directly enforceable rights under GDPR and UK GDPR, including defined response timelines. Brazilian LGPD rights are similarly enforceable. The requirement for a registered account with a valid email to access the data archive may create a practical limitation for unregistered users who also have rights under these frameworks. 4) CONTRACT AND VENDOR IMPLICATIONS: The policy's reference to a data protection office at privacy@waze.com and cooperation with local data protection authorities is relevant to enterprise data processing agreements that require documented data subject rights procedures and DPA contact information. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the data subject rights request process meets applicable response timeline requirements under GDPR, UK GDPR, and LGPD, that the export and deletion mechanisms function as described for both registered and unregistered accounts, and that the data protection officer contact details meet GDPR Article 37 requirements if a formal DPO is appointed.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes the operational mechanism for exercising data subject rights under GDPR, UK GDPR, Israeli data protection law, and LGPD, including the contact point and the data export process available through the Waze website dashboard.
Under this clause, users in the EU, UK, Israel, and Brazil can submit requests to access, correct, delete, restrict, or export their Waze account data by contacting privacy@waze.com or by using the in-app and website controls described in the policy. A registered account with a valid email address is required to use the data archive download function.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Waze.