X shares your personal information with a range of external parties including advertising partners, analytics providers, and business partners who help operate the platform or deliver personalized ads.
This analysis describes what X's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes disclosure of personal data to advertising and analytics partners in connection with ad delivery and service operation, meaning your behavioral data and inferred interests may be transmitted to parties outside X to enable targeted advertising.
Interpretive note: The policy uses the term 'business partners' without exhaustively defining the category, creating ambiguity about the full scope of third-party data recipients.
Under this provision, your browsing behavior, interaction data, device identifiers, and inferred interests may be shared with X's advertising partners and analytics providers to enable personalized advertising. The policy also states that data may be shared with business partners offering services through the X platform.
How other platforms handle this
We may share your personal data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. We may also share your personal data with advertising partners to display relevant advertising to y...
In order to provide you with services, Valve needs to share some data with the publisher or developer of the game (for example to verify your ownership of the game and register your Steam ID with the publisher), or with other third parties that Valve works with to provide services to you. Valve will...
We may share your personal information with third party vendors and service providers that perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service and marketing assistance. We may also share information with advertising and analyt...
Monitoring
X has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We share or disclose your personal information with our service providers, professional advisors, business partners, advertising partners, and analytics providers in connection with the services. For example, we share information with parties that help us operate our services, deliver content, and serve personalized ads. We also share data with business partners that offer services through X's platform or in connection with X's products.— Excerpt from X's X Privacy Policy
REGULATORY LANDSCAPE: This provision engages GDPR Article 6 lawful basis requirements and Article 26 joint controller obligations where advertising partners exercise independent control over shared data. Under CCPA and CPRA, sharing personal information with advertising partners for cross-context behavioral advertising constitutes a 'share' triggering opt-out rights. The FTC Act's prohibition on unfair or deceptive data practices applies to the scope and transparency of ad-related data flows. GOVERNANCE EXPOSURE: High. The combination of behavioral, device, and inferred interest data shared with advertising partners creates a significant data flow requiring documentation under GDPR Article 30 and CCPA data mapping obligations. The term 'business partners' is not exhaustively defined in the available document text, which creates ambiguity regarding the full scope of third-party recipients. JURISDICTION FLAGS: California residents have the right to opt out of the sharing of personal information for cross-context behavioral advertising under CPRA. EU and UK users may invoke rights to object to processing based on legitimate interests, and advertising data flows to non-adequate third countries require compliant transfer mechanisms. Illinois, Virginia, Colorado, and other state privacy law jurisdictions create additional targeted advertising opt-out obligations. CONTRACT AND VENDOR IMPLICATIONS: Enterprises running paid advertising campaigns on X should assess whether their ad targeting configurations result in the receipt of X user data that triggers their own controller obligations under applicable privacy law. Vendor contracts with X should address the scope of data shared in ad contexts. COMPLIANCE CONSIDERATIONS: Compliance teams should ensure that consent mechanisms or opt-out tools for behavioral advertising are operationally functional and clearly disclosed to users. Data processing agreements with X should be reviewed to confirm they address GDPR Article 28 processor requirements and CCPA service provider contractual terms.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision authorizes disclosure of personal data to advertising and analytics partners in connection with ad delivery and service operation, meaning your behavioral data and inferred interests may be transmitted to parties outside X to enable targeted advertising.
Under this provision, your browsing behavior, interaction data, device identifiers, and inferred interests may be shared with X's advertising partners and analytics providers to enable personalized advertising. The policy also states that data may be shared with business partners offering services through the X platform.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by X.