Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy authorizes Google to link information collected across its services and across user devices, including activity on third-party sites and apps that use Google services, and to associate that activity with a user's personal information for advertising and service improvement purposes, subject to account settings.
This analysis describes what YouTube Ads's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the operational basis for Google's cross-context behavioral advertising system, which spans YouTube, Search, third-party publisher sites, and other Google-affiliated surfaces; the scope of data association is contingent on account settings but extends to third-party site activity by default where Google's ad or analytics services are integrated.
The updated policy makes several material clarifications about how Google links your activity across websites and apps. It shifts from describing analytics tools in isolation to framing them as part of a broader 'ad and analytics services' ecosystem, and broadens the scope of data linking to explicitly include 'cookies and other technologies'. The policy also clarifies that data sharing occurs even in private browsing modes. Review your Google Account activity controls to understand what data is being collected and linked across services you use.
View change record →⚠ Cross-service and cross-device activity data will be associated and used for advertising personalization as described in the policy
Cross-platform context
See how other platforms handle Cross-Service and Cross-Device Data Linking for Advertising and Personalization and similar clauses.
Compare across platforms →Monitoring
YouTube Ads has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We may use the information we collect across our services and across your devices for the purposes described above. For example, depending on your available settings, if you watch videos of guitar players on YouTube, you might see an ad for guitar lessons on a site that uses our ad products. Depending on your account settings, your activity on other sites and apps may be associated with your personal information in order to improve Google's services and the ads delivered by Google.Excerpt from YouTube Ads's Google Privacy Policy
1. REGULATORY LANDSCAPE: This provision implicates GDPR Articles on lawful basis for processing and purpose limitation, as well as CCPA and enumerated U.S. state privacy statutes governing cross-context behavioral advertising and opt-out rights. The FTC has enforcement authority over unfair or deceptive data practices at the federal level, and state attorneys general enforce applicable state statutes. Where cross-context behavioral advertising involves EU or EEA user data, the legal basis for processing and adequacy of consent mechanisms requires evaluation under applicable GDPR guidance and national data protection authority decisions. 2. GOVERNANCE EXPOSURE: Medium. The provision authorizes broad cross-service and cross-device data association for advertising purposes, which is a commonly disclosed practice among large digital advertising platforms; however, the extension of data linkage to third-party site activity creates compliance surface area under multiple state opt-out regimes. The policy states that users can control ad personalization through My Ad Center, but the operational sufficiency of that mechanism across all enumerated state law opt-out requirements should be verified. 3. JURISDICTION FLAGS: EU and EEA users are subject to GDPR consent and purpose limitation requirements; the policy notes that EU users' decisions on linking services affect how data is used across services. California residents have CCPA opt-out rights for cross-context behavioral advertising. All enumerated U.S. state privacy law jurisdictions provide opt-out rights for targeted advertising that this provision directly engages. Illinois, Texas, and other states with biometric or sensitive data statutes may create additional exposure depending on the specific data categories involved in linking. 4. CONTRACT AND VENDOR IMPLICATIONS: Organizations using Google Analytics, AdSense, or other Google advertising and analytics services integrated into their own platforms should evaluate how this data linkage provision affects their own privacy disclosures and consent obligations to their users. Standard data processing agreements with Google should be reviewed to confirm alignment with how linked data is described and controlled. Liability for downstream data association from third-party integrations may fall partially on the integrating organization depending on applicable law and contract terms. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should audit whether current consent mechanisms and privacy notices for Google-integrated services adequately disclose cross-context behavioral advertising data flows to satisfy state opt-out notice requirements. Data mapping should reflect third-party site activity as a data category subject to Google's cross-service linking. For EU operations, the legal basis for cross-service data association for advertising should be documented and periodically reviewed against applicable supervisory authority guidance.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes the operational basis for Google's cross-context behavioral advertising system, which spans YouTube, Search, third-party publisher sites, and other Google-affiliated surfaces; the scope of data association is contingent on account settings but extends to third-party site activity by default where Google's ad or analytics services are integrated.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by YouTube Ads.