Waze's Privacy Policy is legally part of these Terms, meaning the data collection and sharing practices described there are binding conditions of using the app.
This analysis describes what Waze's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Incorporation by reference creates a single unified agreement covering both service usage terms and data handling practices. This operational structure means users must review both documents to understand the complete set of binding obligations and authorizations, as modifications to the Privacy Policy can alter the terms without amending the primary Terms of Use.
The full scope of data collection, sharing, and retention practices applicable to Waze users is not contained in these Terms alone; users must also read the Privacy Policy to understand how their information is handled.
How other platforms handle this
By using or accessing the Services, you agree to be bound by this Agreement and acknowledge and agree to the collection, use, and disclosure of your personal information in accordance with DoorDash's Privacy Policy, which is incorporated in this Agreement by reference. You also agree to abide by any...
Information You Provide may include sensitive personal information, as defined under applicable state privacy laws. We process such information in accordance with applicable law, such as to provide the Services and other permitted purposes under state privacy laws, like the California Consumer Priva...
Depending on where you live, you may have certain rights regarding your personal information. These rights may include the right to know what personal information we have collected about you, the right to delete your personal information, the right to correct inaccurate personal information, the rig...
Monitoring
Waze has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Your use of the Service is also subject to Waze's Privacy Policy, which is incorporated herein by reference.— Excerpt from Waze's Waze Terms of Use
1) REGULATORY LANDSCAPE: Incorporation by reference of a privacy policy into terms of service is a standard practice but creates compliance obligations under GDPR (which requires layered, accessible transparency) and CCPA (which requires specific disclosures at or before the point of collection). Both frameworks require that incorporated documents are clearly accessible and that changes to the Privacy Policy are communicated to users. Relevant authorities include EU data protection authorities and the California Privacy Protection Agency. 2) GOVERNANCE EXPOSURE: Medium. If the Privacy Policy is updated independently of the Terms, users may not receive adequate notice of material changes to the binding conditions of service. This creates exposure under GDPR's transparency requirements and CCPA's notice obligations. 3) JURISDICTION FLAGS: EU and EEA users are most exposed, as GDPR requires that all data processing information be presented in a concise, intelligible, and easily accessible form. Incorporation by reference across multiple documents may be found insufficient if users cannot easily locate and understand the combined effect of both documents. 4) CONTRACT AND VENDOR IMPLICATIONS: Procurement teams reviewing Waze for enterprise deployment should obtain and review the current Privacy Policy as a separate document, as it forms part of the binding contract. Any vendor risk assessment should treat the Privacy Policy and Terms as a single contractual instrument. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should implement a process to monitor changes to the Waze Privacy Policy independently, as updates to that document change the binding terms without necessarily triggering a Terms of Use update notice. A review of the consent flow should confirm that users are presented with both documents before account creation.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Incorporation by reference creates a single unified agreement covering both service usage terms and data handling practices. This operational structure means users must review both documents to understand the complete set of binding obligations and authorizations, as modifications to the Privacy Policy can alter the terms without amending the primary Terms of Use.
The full scope of data collection, sharing, and retention practices applicable to Waze users is not contained in these Terms alone; users must also read the Privacy Policy to understand how their information is handled.
ConductAtlas has identified this type of provision across 3 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Waze.