YouTube Ads · Google Privacy Policy · View original document ↗

Cross-Service Data Collection and Combination

Medium severity Medium confidence Explicitdocumentlanguage Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for YouTube Ads Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

The policy states that Google collects data from user-provided inputs, service usage activity, and third-party sources, and combines this data across its services to improve products and personalize advertising.

This analysis describes what YouTube Ads's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes the legal and operational basis for Google combining personal data across Search, YouTube, Gmail, Maps, and advertising networks into unified user profiles, which underpins the targeting capabilities of YouTube Ads and Google's broader advertising ecosystem.

Interpretive note: The precise scope of cross-service data combination for signed-out users and the specific lawful bases applied in each jurisdiction are not fully detailed in the policy text.

Clause Stability Stable

0
Changes
3
Months Monitored
May 20, 2026
First Seen
May 22, 2026
Last Seen
This clause type exists across 3350 other provisions on other platforms.

Change history

added May 27, 2026

This new provision explicitly clarifies that Google collects information from third parties and categorizes collection methods, making data sourcing more transparent but also emphasizing the breadth of collection.

View full change record →

Consumer impact (what this means for users)

Under this provision, data generated across multiple Google services including YouTube viewing history, Search queries, location, and Gmail content may be combined to build a profile used for ad targeting. The agreement states this combination applies to both signed-in and, to a lesser degree, signed-out users.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Visit adssettings.google.com while signed in to your Google Account to review and adjust ad personalization settings, including whether your data is used across services for ad targeting.

How other platforms handle this

Ledger Medium

At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.

Strava Medium

If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes; we do not disclose it to third parties without your prior consent; and we will only use it for the specific purposes described in this Policy.

eBay Medium

We collect your personal data when you use our Services, create a new eBay account, provide us with information via a web form, add or update information in your eBay account, participate in online community discussions or otherwise interact with us.

See all platforms with this clause type →

Monitoring

YouTube Ads has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We collect information to provide better services to all our users — from figuring out basic stuff like which language you speak, to more complex things like which ads you'll find most useful, the people who matter most to you online, or which YouTube videos you might like. Google collects information in the following ways: Information you create or provide to us... Information we collect as you use our services... Information we collect from third parties.

— Excerpt from YouTube Ads's Google Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

1) REGULATORY LANDSCAPE: This provision engages GDPR Articles 5 (data minimisation), 6 (lawful basis), and 25 (data protection by design), as well as CCPA/CPRA provisions on cross-context behavioral advertising. The Irish Data Protection Commission is the lead EU supervisory authority. Assertions regarding cross-service data combination may require evaluation of whether a single or multiple lawful bases apply to distinct processing activities. 2) GOVERNANCE EXPOSURE: High. The combination of personal data across distinct services and third-party sources to build advertising profiles is an operationally significant practice that has been the subject of regulatory enforcement in EU and US jurisdictions. Compliance teams should assess whether current consent and transparency mechanisms satisfy applicable regulatory requirements. 3) JURISDICTION FLAGS: EU/EEA users have heightened exposure due to GDPR requirements for explicit lawful basis and, in some member states, consent requirements for profiling. California residents have CCPA/CPRA rights to opt out of the sale or sharing of personal information for cross-context behavioral advertising. UK users are subject to UK GDPR obligations. 4) CONTRACT AND VENDOR IMPLICATIONS: Organizations using Google Ads or YouTube advertising products should confirm their data processing agreements address cross-service data combination. Controller-processor and controller-controller distinctions under GDPR require evaluation when deploying Google advertising tools on publisher or advertiser websites. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should audit consent management platform configurations to ensure cross-service data sharing is disclosed and, where required, consented to. Data mapping exercises should document Google as a data processor or joint controller depending on the product context. Vendor risk assessments should account for Google's cross-service data combination scope.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has jurisdiction over unfair or deceptive data practices, including cross-context behavioral advertising and data combination by large online platforms.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
COPPA
United States Federal
Connecticut Data Privacy Act Amendments
US-CT
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
Google Privacy Policy
Entity
YouTube Ads
Document last updated
May 5, 2026
Tracking information
First tracked
May 20, 2026
Last verified
May 20, 2026
Record ID
CA-P-012313
Document ID
CA-D-00015
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
91bae3a835d31c9a543fc31417de6162cde15363f0011ee54d2279b7f52e7da8
Analysis generated
May 20, 2026 19:55 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: YouTube Ads
Document: Google Privacy Policy
Record ID: CA-P-012313
Captured: 2026-05-20 19:55:39 UTC
SHA-256: 91bae3a835d31c9a…
URL: https://conductatlas.com/platform/youtube-ads/google-privacy-policy/cross-service-data-collection-and-combination/
Accessed: June 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does YouTube Ads's Cross-Service Data Collection and Combination clause do?

This provision establishes the legal and operational basis for Google combining personal data across Search, YouTube, Gmail, Maps, and advertising networks into unified user profiles, which underpins the targeting capabilities of YouTube Ads and Google's broader advertising ecosystem.

How does this clause affect you?

Under this provision, data generated across multiple Google services including YouTube viewing history, Search queries, location, and Gmail content may be combined to build a profile used for ad targeting. The agreement states this combination applies to both signed-in and, to a lesser degree, signed-out users.

Is ConductAtlas affiliated with YouTube Ads?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by YouTube Ads.