YouTube Kids will not share your child's individual data outside Google except with parental consent, for legal reasons, or when sharing with third-party processors who handle data on Google's behalf under confidentiality requirements.
This analysis describes what YouTube Kids's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The external processing carve-out means that third-party vendors and affiliates may access your child's data as processors, even without specific parental consent for each such transfer, provided they operate under Google's instructions and privacy commitments.
Interpretive note: The scope of 'affiliates or other trusted businesses or persons' is not enumerated, creating some ambiguity about the breadth of the processor network that may access child user data.
Your child's data may be shared with Google's affiliates and third-party service providers for processing purposes without requiring separate parental consent for each transfer, provided those parties operate under Google's instructions. Individual data will otherwise only be shared externally with parental consent or for legal compliance reasons.
How other platforms handle this
Protect us, our business, our users, and others, for example to enforce our terms of service, prevent spam or other unwanted communications, and investigate or protect against fraud
Each payment processor uses and processes your complete payment information in accordance with its applicable privacy policy (Stripe and PayPal).
Third-party apps use data from Gemini consistent with their own privacy policies and terms.
"We will not disclose individual user information outside of Google unless one of the following circumstances applies: With consent. We may share individual user information with companies, organizations or individuals outside of Google when we have parental consent. For external processing. We may provide individual user information to our affiliates or other trusted businesses or persons to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures.Excerpt from YouTube Kids's Privacy Notice
REGULATORY LANDSCAPE: Under COPPA, operators must disclose their data sharing practices with third parties and obtain verifiable parental consent before sharing children's personal information with third parties for purposes other than internal operations.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The external processing carve-out means that third-party vendors and affiliates may access your child's data as processors, even without specific parental consent for each such transfer, provided they operate under Google's instructions and privacy commitments.
Your child's data may be shared with Google's affiliates and third-party service providers for processing purposes without requiring separate parental consent for each transfer, provided those parties operate under Google's instructions. Individual data will otherwise only be shared externally with parental consent or for legal compliance reasons.
ConductAtlas has identified this type of provision across 287 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by YouTube Kids.