X · X Privacy Policy · View original document ↗

Biometric Data Collection

High severity Uncommon · 19 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for X Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what X's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The clause establishes X's authority to process biometric data across multiple operational purposes while conditioning certain collection activities on either user choice or legal authorization. The consent requirement for biometric processing creates a compliance obligation that varies based on applicable jurisdictional law.

Consumer impact (what this means for users)

Users may share biometric information with X, which the platform is authorized to process for specified operational and product development purposes. The terms require consent prior to biometric processing only where applicable law mandates such consent; in other jurisdictions, the authorization operates based on user choice or legal permission without an explicit consent requirement.

How other platforms handle this

Wealthfront Medium

We may use third-party vendors for identity verification. These vendors analyze whether the Client's "selfie" matches the government-issued identity document. The information collected from Client photographs may constitute biometric information in some jurisdictions. Where required by law, we will ...

Roblox Medium

Your use of the Services is also governed by our Privacy Policy, which is incorporated into these Terms by reference. By using the Services, you consent to the data collection and use practices described in the Privacy Policy. Roblox collects information you provide directly, information collected a...

Best Buy Medium

We collect information about you in a variety of ways depending on how you interact with us and our products and services. This includes information you provide directly, information we collect automatically when you use our services, and information we receive from third parties. We may collect ide...

See all platforms with this clause type →

Monitoring

X has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Biometric information: X may collect biometric information for safety, security, and identification purposes, and to help provide and improve our products and services, if you choose to share that information with us or if it is permitted by applicable law. Where required by law, we will obtain your consent prior to processing your biometric information.

— Excerpt from X's X Privacy Policy

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
X Privacy Policy
Entity
X
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 12, 2026
Record ID
CA-P-006635
Document ID
CA-D-00030
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
0f23df42ef3cddb4de37fa368ab31f32853cb55b59dcc25c699bf64703e25d81
Analysis generated
May 8, 2026 12:18 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: X
Document: X Privacy Policy
Record ID: CA-P-006635
Captured: 2026-05-08 12:18:24 UTC
SHA-256: 0f23df42ef3cddb4…
URL: https://conductatlas.com/platform/x/x-privacy-policy/biometric-data-collection/
Accessed: May 20, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does X's Biometric Data Collection clause do?

The clause establishes X's authority to process biometric data across multiple operational purposes while conditioning certain collection activities on either user choice or legal authorization. The consent requirement for biometric processing creates a compliance obligation that varies based on applicable jurisdictional law.

How does this clause affect you?

Users may share biometric information with X, which the platform is authorized to process for specified operational and product development purposes. The terms require consent prior to biometric processing only where applicable law mandates such consent; in other jurisdictions, the authorization operates based on user choice or legal permission without an explicit consent requirement.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 19 platforms. See the full comparison.

Is ConductAtlas affiliated with X?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by X.