Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that Google uses collected information to personalize ads based on user interests and activity across its services, and authorizes users to control advertising personalization through My Ad Center settings.
This analysis describes what YouTube Ads's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the operational basis for Google's personalized advertising system across Search, YouTube, and partner sites, and identifies My Ad Center as the designated control mechanism for ad personalization preferences; the effectiveness of this control mechanism in satisfying opt-out obligations across enumerated state privacy statutes should be evaluated by compliance teams.
The updated policy makes several material clarifications about how Google links your activity across websites and apps. It shifts from describing analytics tools in isolation to framing them as part of a broader 'ad and analytics services' ecosystem, and broadens the scope of data linking to explicitly include 'cookies and other technologies'. The policy also clarifies that data sharing occurs even in private browsing modes. Review your Google Account activity controls to understand what data is being collected and linked across services you use.
View change record →⚠ Personalized ads based on cross-service activity will continue to be shown as described in the policy
Cross-platform context
See how other platforms handle Advertising Data Processing and Ad Personalization Controls and similar clauses.
Compare across platforms →Monitoring
YouTube Ads has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We use the information we collect to tailor our services for you, including providing customized and personalized experiences and recommendations, including things like content, and search results. Depending on your settings, we may also show you personalized ads based on your interests and activity across Google services. For example, if you search for "mountain bikes," you may see ads for sports equipment on YouTube. You can control what information we use to show you ads by visiting your ad settings in My Ad Center.Excerpt from YouTube Ads's Google Privacy Policy
1. REGULATORY LANDSCAPE: This provision implicates CCPA and enumerated state privacy statutes that provide opt-out rights for cross-context behavioral advertising and targeted advertising. The FTC has enforcement authority over deceptive advertising and privacy practices. In EU and EEA jurisdictions, behavioral advertising requires a valid legal basis under GDPR and compliance with ePrivacy Directive requirements for consent to cookie-based targeting. The Digital Services Act in the EU also imposes obligations on very large online platforms regarding targeted advertising transparency. 2. GOVERNANCE EXPOSURE: Medium. Personalized advertising based on cross-service activity is a broadly disclosed practice among large digital advertising platforms; the presence of My Ad Center as a user control mechanism addresses transparency obligations but the sufficiency of that mechanism across all enumerated state opt-out frameworks requires jurisdiction-specific verification. The policy's statement that sensitive categories such as race, religion, sexual orientation, and health are excluded from personalized ad targeting is a material representation that should be operationally verified. 3. JURISDICTION FLAGS: EU and EEA jurisdictions require consent for behavioral advertising and impose Digital Services Act transparency obligations on very large platforms. California, Virginia, Colorado, Connecticut, and the other enumerated state law jurisdictions provide opt-out rights for targeted advertising that My Ad Center must operationally satisfy. The policy's exclusion of sensitive categories from ad personalization engages GDPR special category restrictions and applicable state sensitive data provisions. 4. CONTRACT AND VENDOR IMPLICATIONS: Advertisers using Google's advertising platforms should review how this provision affects their own data processing obligations and privacy disclosures. The policy's statement that Google does not share personal information such as name or email with advertisers without user consent is a material representation that affects advertiser data access expectations and should be reflected in advertiser-facing terms. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that My Ad Center provides operationally functional opt-out mechanisms that satisfy each enumerated state law's targeted advertising opt-out requirements. The sensitive category exclusion from ad personalization should be documented as a policy commitment and periodically audited. EU compliance programs should ensure that behavioral advertising consent mechanisms are implemented separately from and consistently with Google's My Ad Center controls.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes the operational basis for Google's personalized advertising system across Search, YouTube, and partner sites, and identifies My Ad Center as the designated control mechanism for ad personalization preferences; the effectiveness of this control mechanism in satisfying opt-out obligations across enumerated state privacy statutes should be evaluated by compliance teams.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by YouTube Ads.