Xfinity may monitor and collect data about which websites you visit and what content you access through its network, as well as how long and how often you use your internet service.
This analysis describes what Xfinity's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
As your internet service provider, Xfinity has a privileged position to observe your online behavior at the network level, and the policy indicates this data may be used for advertising purposes, which engages both FCC and FTC jurisdiction.
Interpretive note: The precise scope of network-level monitoring versus application-level data collection is not fully specified in the policy, and whether browsing data is actively used for advertising versus merely collected depends on implementation details not disclosed.
Your internet browsing activity, including the websites you visit and content you download, may be collected and used by Xfinity for targeted advertising, which is a use that extends well beyond what is necessary to deliver internet service.
Cross-platform context
See how other platforms handle Internet Activity and Network Monitoring and similar clauses.
Compare across platforms →Monitoring
Xfinity has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We collect information about your use of our Services and the devices you use to access our Services, including information about your internet usage, such as the websites you visit, the content you view or download, the frequency and duration of your activities, and the devices you use.— Excerpt from Xfinity's Comcast Privacy Policy
REGULATORY LANDSCAPE: ISP collection and use of browsing data for advertising engages the FTC Act and, historically, FCC broadband privacy rules (though the 2017 Congressional Review Act resolution eliminated certain FCC ISP privacy rules, leaving the FTC as primary regulator). Maine's Broadband Customer Privacy Law requires opt-in consent from ISP customers before their browsing and location data can be used for advertising. CCPA/CPRA treats browsing history as personal information subject to consumer rights including opt-out of sale and sharing. GOVERNANCE EXPOSURE: High. The use of network-level browsing data for advertising is among the most contested areas of ISP privacy practice. Maine's law imposes an affirmative opt-in requirement that is more stringent than the opt-out model implied by the Xfinity policy, creating specific compliance exposure for Maine subscribers. The FTC's commercial surveillance rulemaking may further affect ISP data use practices. JURISDICTION FLAGS: Maine subscribers face the highest regulatory exposure under Maine's Broadband Customer Privacy Law. California subscribers have CPRA opt-out rights. Any commercial use of browsing data for advertising requires careful evaluation against state-by-state consent requirements. EU and UK subscribers covered by the policy's EEA notice face GDPR lawful basis requirements for this type of processing. CONTRACT AND VENDOR IMPLICATIONS: Advertising technology partners and data analytics vendors that receive or process network browsing data should be assessed for compliance with applicable ISP privacy laws. Contracts should specify data use limitations and prohibit downstream sharing or use for non-disclosed purposes. COMPLIANCE CONSIDERATIONS: Compliance teams should evaluate whether the opt-out advertising control model satisfies Maine's opt-in consent requirement for broadband subscribers, and whether separate consent flows are implemented for Maine customers. The intersection of network monitoring capabilities and advertising use should be mapped and disclosed with sufficient specificity to satisfy CCPA/CPRA's notice requirements.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
As your internet service provider, Xfinity has a privileged position to observe your online behavior at the network level, and the policy indicates this data may be used for advertising purposes, which engages both FCC and FTC jurisdiction.
Your internet browsing activity, including the websites you visit and content you download, may be collected and used by Xfinity for targeted advertising, which is a use that extends well beyond what is necessary to deliver internet service.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Xfinity.