A hard 24-hour deadline for breach notification leaves the customer very little time to respond, and failure to meet it could constitute a breach of the agreement.
Brex
· Brex Terms of Service
There is a material change in the control or ownership (whether direct or indirect), including transfer or sale of 25% or more of assets
When any New Subprocessor is engaged during the Term, Google will, at least 30 days before the New Subprocessor processes any Customer Personal Data, inform Customer of the engagement (including the name and location of the relevant New Subprocessor...)
Modal
· Modal Terms of Service
The 48-hour deadline creates a strict, enforceable notification window that limits how long Modal can delay disclosure of a breach affecting Customer Personal Data.
T-Mobile
· T-Mobile Terms and Conditions
T-Mobile cannot assure you that your location will be automatically sent when calling 911 or that you will be connected to the nearest public safety agency.
Users have no stated opt-out from public visibility of their Account Information other than their email address, meaning most account data is exposed to anyone by default.
Subscribers paying a premium for an ad-free tier may still encounter ads on specific content, making the 'ad-free' label materially qualified.
Hulu
· Hulu Subscriber Agreement
Users paying for an ad-free tier may still encounter ads in specific content categories, meaning the 'ad-free' label does not guarantee a fully ad-free experience.
ADP
· ADP Privacy Statement
The obligation to notify without undue delay limits ADP's ability to delay disclosure of breaches to the client, but a law enforcement or supervisory authority carve-out can suspend that obligation.
ADP
· ADP Privacy Statement
Individual notification is conditional on a high-risk-of-harm determination, meaning individuals assessed as lower risk may not receive direct breach notification.
The clause protects users from being deceived about what is an advertisement versus editorial content, and places affirmative formatting obligations on publishers.
The clause imposes an affirmative disclosure standard on audiovisual ads and independently bans covert commercial messaging, meaning advertisers cannot obscure the commercial nature of their content.
Google Ads
· Google Ads Editorial and Technical Requirements
Advertisers must clearly identify what they are promoting in both their ad and its destination; failure to do so violates Google Ads policy and prevents users from knowing what is being advertised.
Advance notice before legally compelled disclosure gives individuals an opportunity to respond before their data is shared, subject to the legal prohibition carve-out.
You are responsible for ensuring that this information is complete, accurate and up-to-date for each ad that you submit to Meta, and that it remains so for the entirety of the period during which the ad is running.
Advertisers must ensure that each ad complies with all applicable federal, state, and local laws and regulations regarding "paid for by" disclaimers.
Affirm
· Affirm Privacy Policy
If these activities constitute a CCPA sale or sharing, California residents may have rights to opt out of them, making this disclosure legally significant.
This requirement places a direct, affirmative obligation on users to disclose paid commercial relationships, with specific minimum labeling standards.
any referrals of you by any of the Zillow Companies may provide the referred company, its direct or indirect parent (including Zillow Group), and our respective employees with a financial or other benefit.
This designation limits the legal character of AI-generated outputs, meaning users cannot rely on them as professional investment guidance regardless of how specific or personalized the responses appear.
This disclosure obligation ensures individuals and consumers are informed of AI involvement in outputs that may directly affect them, at a defined minimum frequency.
The obligation ties disclosure to an external legal threshold, meaning compliance varies by jurisdiction and failure to disclose where legally required exposes the Customer to legal risk.
AI Generated content must comply with our Terms of Service and must be clearly and conspicuously captioned as AI Generated Content with a signifier such as #ai, or #AIGenerated.
If you use any Output that identifies or resembles a person, you will publicly identify that such Output was AI generated.
i. intentionally misrepresent the origin of the Output such as by claiming that the Output generated by the advanced intelligence features has been made or authored by a human when it was not, or claiming Output as unique, original work...
xAI
· xAI Acceptable Use Policy
Misleading others or not being transparent regarding your use of AI, including by phishing, creating fake accounts, providing services that appear to be from you, when they are in fact from xAI...
Apple
· Apple App Store Review Guidelines
This requirement ensures that users can locate an app's privacy policy at two distinct points—before downloading and while using the app—making privacy disclosures universally available.
All information you provide to us must be complete, accurate and truthful. You must update this information whenever it changes. We cannot be responsible for any loss arising out of your failure to do so.
A blanket risk disclosure covering all investments, including capital loss, places the reader on notice of the fundamental financial risk of investing.
all such communications are clearly and conspicuously identified as advertising or sponsored material in accordance with applicable disclosure requirements.