Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that Google does not use sensitive categories (race, religion, sexual orientation, health) or content from Drive, Gmail, or Photos for personalized ad targeting, and does not share personally identifying information such as name or email with advertisers without user request.
This analysis describes what YouTube Ads's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes specific categorical exclusions from Google's advertising personalization system. The exclusion of Drive, Gmail, and Photos content from ad targeting is a material limitation on the scope of data used for advertising, and the prohibition on sharing personally identifying information with advertisers addresses a frequently cited consumer concern.
Interpretive note: The practical scope of the 'health' exclusion relative to inferred interest categories and health-proximate behavioral signals is not fully specified in the policy text, creating some ambiguity about the operational boundaries of this exclusion.
The updated policy makes several material clarifications about how Google links your activity across websites and apps. It shifts from describing analytics tools in isolation to framing them as part of a broader 'ad and analytics services' ecosystem, and broadens the scope of data linking to explicitly include 'cookies and other technologies'. The policy also clarifies that data sharing occurs even in private browsing modes. Review your Google Account activity controls to understand what data is being collected and linked across services you use.
View change record →Under this clause, Google's advertising personalization system is stated to exclude sensitive demographic and health categories, and content from Gmail, Drive, and Photos. The agreement also states that advertisers do not receive personally identifying information such as name or email address unless the user specifically authorizes this.
Cross-platform context
See how other platforms handle Personalized Advertising Using Sensitive Category Exclusions and similar clauses.
Compare across platforms →Monitoring
YouTube Ads has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We don't show you personalized ads based on sensitive categories, such as race, religion, sexual orientation, or health. We don't show you personalized ads based on your content from Drive, Gmail, or Photos. We don't share information that personally identifies you with advertisers, such as your name or email, unless you ask us to.Excerpt from YouTube Ads's Google Privacy Policy
1. REGULATORY LANDSCAPE: This provision engages FTC guidance on sensitive data categories in advertising, and GDPR Article 9's restrictions on processing special category personal data including racial origin, religious beliefs, sexual orientation, and health data for advertising purposes. The CCPA also designates health and certain other information as sensitive data requiring specific handling. The policy's categorical exclusions align with these regulatory restrictions and may constitute material compliance representations. 2. GOVERNANCE EXPOSURE: Low to Medium. The exclusions described are protective and reduce compliance exposure relative to a policy that permitted sensitive category ad targeting. However, the precision of the exclusion depends on how 'health' is defined in practice relative to the broad health data collected from Fitbit, Pixel, and similar services, and whether inferred health-related ad interest categories (such as fitness or diet) are considered to fall within the stated exclusion. 3. JURISDICTION FLAGS: EU/EEA users benefit from GDPR Article 9's prohibition on processing special category data for advertising without explicit consent, which aligns with the stated exclusions. California's CCPA designates certain sensitive categories, including health data, as requiring specific disclosure and opt-out rights, which the policy's exclusions address. 4. CONTRACT AND VENDOR IMPLICATIONS: Advertisers using Google Ads should note the policy's statement that sensitive category targeting is not offered, and should review Google's advertising policies for enforcement mechanisms that operationalize these exclusions. Any contractual representations made to advertisers about audience targeting capabilities should be consistent with these stated exclusions. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether inferred interest categories used in Google's ad targeting system (which the policy references as 'ads interest categories' under data collected) are consistently applied to exclude health-proximate categories as stated. The policy's statement that Drive, Gmail, and Photos content is not used for advertising should be verified against any Google product-specific terms that might apply to organizational deployments.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes specific categorical exclusions from Google's advertising personalization system. The exclusion of Drive, Gmail, and Photos content from ad targeting is a material limitation on the scope of data used for advertising, and the prohibition on sharing personally identifying information with advertisers addresses a frequently cited consumer concern.
Under this clause, Google's advertising personalization system is stated to exclude sensitive demographic and health categories, and content from Gmail, Drive, and Photos. The agreement also states that advertisers do not receive personally identifying information such as name or email address unless the user specifically authorizes this.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by YouTube Ads.