X · X Privacy Policy · View original document ↗

Sensitive Attribute Inference

High severity Medium confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for X Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what X's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The clause establishes the operational scope of X's data processing by specifying that inferences—not merely collection of stated information—constitute an authorized use of user data. This extends the company's processing authority beyond explicitly provided information to derived attributes.

Interpretive note: The clause's qualifier 'if permitted by applicable law' creates interpretive uncertainty about which legal basis applies in each jurisdiction and whether existing consent mechanisms are sufficient under GDPR Article 9 or CPRA.

Consumer impact (what this means for users)

Users' posted content and interaction patterns become inputs for inferential processing that generates demographic and interest-based attributes. The provision permits use of sensitive personal information for inference purposes where law allows, expanding the categories of information X may process beyond what users directly disclose.

Cross-platform context

See how other platforms handle Sensitive Attribute Inference and similar clauses.

Compare across platforms →

Monitoring

X has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We may use the information we collect to make inferences about you. For example, we infer your age range, the languages you speak, and your interests (like sports, news, politics, and finance) based on what you post and how you interact with X. We may also use your sensitive personal information to make inferences if permitted by applicable law.

— Excerpt from X's X Privacy Policy

Provision details

Document information
Document
X Privacy Policy
Entity
X
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 12, 2026
Record ID
CA-P-009971
Document ID
CA-D-00030
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
0f23df42ef3cddb4de37fa368ab31f32853cb55b59dcc25c699bf64703e25d81
Analysis generated
May 8, 2026 12:18 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: X
Document: X Privacy Policy
Record ID: CA-P-009971
Captured: 2026-05-08 12:18:24 UTC
SHA-256: 0f23df42ef3cddb4…
URL: https://conductatlas.com/platform/x/x-privacy-policy/sensitive-attribute-inference/
Accessed: May 20, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does X's Sensitive Attribute Inference clause do?

The clause establishes the operational scope of X's data processing by specifying that inferences—not merely collection of stated information—constitute an authorized use of user data. This extends the company's processing authority beyond explicitly provided information to derived attributes.

How does this clause affect you?

Users' posted content and interaction patterns become inputs for inferential processing that generates demographic and interest-based attributes. The provision permits use of sensitive personal information for inference purposes where law allows, expanding the categories of information X may process beyond what users directly disclose.

Is ConductAtlas affiliated with X?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by X.