The policy discloses that CoreWeave may collect biometric information and video surveillance recordings from individuals who visit its offices or data centers, alongside standard visitor identification data such as name, company affiliation, badge credentials, and access times.
This analysis describes what Weights & Biases's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes collection of biometric information at physical locations under a legitimate interests basis (GDPR Article 6(1)(f)), without specifying a separate consent mechanism. State biometric privacy statutes in Illinois, Texas, and other jurisdictions impose independent written consent requirements that may not be satisfied by a legitimate interest basis alone, creating potential compliance exposure for CoreWeave and for enterprise customers whose employees or contractors visit CoreWeave facilities.
Interpretive note: Whether the legitimate interests legal basis cited is sufficient to satisfy applicable biometric statutes in specific jurisdictions depends on those statutes' independent consent and disclosure requirements, which vary by state.
Under this clause, individuals visiting CoreWeave offices or data centers may have biometric information and video surveillance data collected and retained for physical security purposes. The agreement cites legitimate interests as the legal basis for this processing without specifying a separate consent mechanism or a defined retention period for biometric data.
Cross-platform context
See how other platforms handle Biometric and Surveillance Data Collection at Physical Locations and similar clauses.
Compare across platforms →"When you visit our offices or data centers, we may collect identification and access-related information, such as your name, contact details, company affiliation, visitor logs, badge or credential information, access times, and, where applicable, biometric information and video surveillance.Excerpt from Weights & Biases's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision may require evaluation under the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and the Washington My Health MY Data Act, each …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision authorizes collection of biometric information at physical locations under a legitimate interests basis (GDPR Article 6(1)(f)), without specifying a separate consent mechanism. State biometric privacy statutes in Illinois, Texas, and other jurisdictions impose independent written consent requirements that may not be satisfied by a legitimate interest basis alone, creating potential compliance exposure for CoreWeave and for enterprise customers …
Under this clause, individuals visiting CoreWeave offices or data centers may have biometric information and video surveillance data collected and retained for physical security purposes. The agreement cites legitimate interests as the legal basis for this processing without specifying a separate consent mechanism or a defined retention period for biometric data.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Weights & Biases.