The policy authorizes Xfinity to aggregate or deidentify user information and then use, share, license, or sell that information for any purpose without restriction, and states that the Privacy Policy's protections no longer apply to such information.
This analysis describes what Xfinity's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision removes Privacy Policy protections from any information Xfinity classifies as aggregated or deidentified, and authorizes commercial use including sale and licensing of that data without purpose limitation. The provision does not specify the deidentification standard or methodology applied, which is a compliance consideration under CCPA and GDPR frameworks that impose specific deidentification and anonymization thresholds.
Under this clause, once Xfinity determines that information has been aggregated or deidentified, the terms of the Privacy Policy no longer apply to that information, and Xfinity may sell or license it for any purpose. The agreement does not specify the technical or procedural standard used to determine when data qualifies as deidentified.
Cross-platform context
See how other platforms handle Deidentified and Aggregated Data Use, Licensing, and Sale and similar clauses.
Compare across platforms →"We may aggregate or deidentify your information and may use, share, license, or sell aggregated or deidentified information for any purpose. Our use of information that is no longer personal information is not subject to this Privacy Policy.Excerpt from Xfinity's Comcast Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages CCPA and the California Privacy Rights Act, which impose specific requirements on deidentification including implementing technical safeguards and making public commitments not to re-identify data.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision removes Privacy Policy protections from any information Xfinity classifies as aggregated or deidentified, and authorizes commercial use including sale and licensing of that data without purpose limitation. The provision does not specify the deidentification standard or methodology applied, which is a compliance consideration under CCPA and GDPR frameworks that impose specific deidentification and anonymization thresholds.
Under this clause, once Xfinity determines that information has been aggregated or deidentified, the terms of the Privacy Policy no longer apply to that information, and Xfinity may sell or license it for any purpose. The agreement does not specify the technical or procedural standard used to determine when data qualifies as deidentified.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Xfinity.