The policy discloses that when Xfinity shares non-directly-identifying data such as IP addresses or device identifiers with third-party partners, those partners may be capable of re-identifying users using information from other sources.
This analysis describes what Xfinity's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause establishes that Xfinity recognizes a re-identification risk when sharing ostensibly non-identifying information, meaning practical anonymity is not guaranteed even for non-directly-identifying data Xfinity discloses.
Under this clause, Xfinity discloses that third-party partners receiving data such as IP addresses or device identifiers may combine that data with other sources to identify individual users. The agreement does not represent that Xfinity contractually restricts partners from engaging in such re-identification.
How other platforms handle this
We will make it clear by notice to you which (if any) goods or services, or website links, we receive a benefit from by featuring them on our Platform.
In certain situations, Glassdoor may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
prevent or detect violations of our Terms or fraud or abuse of Strava or its users; or (4) protect our operations or our property or other legal rights, including in connection with actual or potential litigation.
"Where the personal information we may disclose does not directly identify you...it is possible that our third party partners may be able to identify you based on information they collect from other sources...Excerpt from Xfinity's Comcast Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages GDPR's definition of personal data, which encompasses information that is identifiable when combined with other data held by a controller or a third party.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The clause establishes that Xfinity recognizes a re-identification risk when sharing ostensibly non-identifying information, meaning practical anonymity is not guaranteed even for non-directly-identifying data Xfinity discloses.
Under this clause, Xfinity discloses that third-party partners receiving data such as IP addresses or device identifiers may combine that data with other sources to identify individual users. The agreement does not represent that Xfinity contractually restricts partners from engaging in such re-identification.
ConductAtlas has identified this type of provision across 272 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Xfinity.