Skip to main content

Privacy Policy Generator Release Notes

Rogelyn
Updated

As privacy laws evolve, Termly updates its Privacy Policy Generator to ensure compliance with new and changing regulations. Our goal is to maintain transparency about these updates and new offerings.

Please note, policy changes become effective only after you republish your policy via the Termly dashboard.

 

May 22, 2025

  • Updated Section: User Location

    • Purpose: Legal

    • Summary: Added language for compliance with PIPEDA and Law 25.

    • Impact: The “HOW DO WE PROCESS YOUR INFORMATION?” section will explain that personal information is collected for the purposes you select and for other purposes with your users’ prior consent only. The “WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?” section has an added exception where processing personal information is legally permitted without consent. The “DO WE COLLECT INFORMATION FROM MINORS?” section includes language allowing the age of minors to mean the age as specified by law in your jurisdiction. The “WHAT ARE YOUR PRIVACY RIGHTS?” section includes the rights users have regarding automated decision making. If you have users in Canada and already published your policy, we recommend republishing your policy to include this update.

March 27, 2025

  • Updated Section: US State Laws

    • Purpose: Legal

    • Summary: Customers can be compliant with the Maryland Online Data Protection Act (MODPA) and Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA).

    • Impact: The “DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS” section will specify the US state residents your policy applies to and list all relevant privacy rights afforded to your customers.

January 30, 2025

  • Updated Section: Marketing and Promotional Communications

    • Purpose: Legal

    • Summary: Includes language on not sharing mobile information with third parties, a requirement by The Campaign Registry (TCR).

    • Impact: If you send SMS text messages to your users, the “Opting out of marketing and promotional communications” section under “WHAT ARE YOUR PRIVACY RIGHTS?” will state that no mobile information will be shared with third parties from marketing or promotional purposes.

October 24, 2024

  • Updated Section: Use of Information

    • Purpose: Legal

    • Summary: Specify if you use personal information for profiling and automated decision making.

    • Impact: If you collect personal information from US users, the “DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS” will state that your use persona information for profiling and automated decision making.

  • Updated Section: US State Laws

    • Purpose: Legal

    • Summary: Customers can be compliant with the Minnesota Consumer Data Privacy Act (MCDPA) and Nebraska Data Privacy Act (NDPA).

    • Impact: The “DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS” section will specify the US state residents your policy applies to. This section will also list the specific privacy rights Minnesota residents have.

August 22, 2024

  • New Section: Use and Description

    • Purpose: General

    • Summary: Add a description of your product or service

    • Impact: The introduction of the privacy policy will include the name and description of your product and/or service

July 18, 2024

  • New Section: Personal Information from Google API

    • Purpose: General

    • Summary: Update your policy to comply with Google API services.

    • Impact: Under “Google API,” in the “WHAT INFORMATION DO WE COLLECT?” section will include the required language by Google when using any Google API services.

  • Updated Section: Disclosure of Third Parties

    • Purpose: Legal

    • Summary: List if you disclose personal information to AI platforms.

    • Impact: The “WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?” section will list that you disclose personal information to AI platforms.

  • Updated Section: Sell to Third Parties

    • Purpose: Legal

    • Summary: List if you sell personal information to AI platforms.

    • Impact: Under “Will you information be shared with anyone else?” in the “WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?” section will list that you sell personal information to AI platforms.

  • Updated Section: Share with Third Parties

    • Purpose: Legal

    • Summary: List if you share personal information with AI platforms.

    • Impact: Under “Will you information be shared with anyone else?” in the “WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?” section will list that you share personal information with AI platforms.

  • New Section: Artificial Intelligence

    • Purpose: Legal

    • Summary: Specify if you offer AI-based services or products on your website or app.

    • Impact: A new section, “DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?” will include details on the functions of your AI-based services, the AI-platforms you use (if any), and how users can opt out of the processing of their personal information.

May 23, 2024

  • New Section: Data Privacy Framework

    • Purpose: Legal

    • Summary: Update your policy to comply with the Data Privacy Framework (DPF) program.

    • Impact: The “IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?” section will include all required language by the DPF program, including a declaration of commitment to adhere to the DPF Principles. Under the “WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?” section, if you disclose personal information to third parties, your policy will specify that those third parties must also maintain the same level of protection as mandated by the DPF Principles.

  • Updated Section: Name Your Policy

    • Purpose: General

    • Summary: Option to omit or remove the policy title.

    • Impact: Your policy will not include a title.

May 16, 2024

  • Updated Section: US State Laws

    • Purpose: Legal

    • Summary: Customers can be compliant with 11 new US state privacy laws.

    • Impact: The “DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS” section will specify the US state residents your policy applies to. This section has also been updated to consolidate all previous, individual state subsections to general language for all states.

  • Updated Section: Sensitive Personal Information Under State Laws

    • Purpose: Legal

    • Summary: Updated the list of sensitive information. This page also includes the option to specify if your business uses sensitive information for inferring characteristics.

    • Impact: If you do not use sensitive information for inferring characteristics, your policy will specify that under the “DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS” section.

  • Updated Section: Financial Incentives

    • Purpose: Legal

    • Summary: Financial incentives can also apply to the Colorado Privacy Act (CPA).

    • Impact: If your business provides financial incentives to Colorado residents, your policy will include the necessary language about financial incentive programs under the “DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS” section.

  • Updated Section: Inquiries

    • Purpose: Legal

    • Summary: Contact information for data privacy questions applies to all US state laws.

    • Impact: Any contact information you provide specifically for US state residents will appear under the “DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS” section.

March 28, 2024

  • New Section: Marketing and Promotional Communications

    • Purpose: Legal

    • Summary: Customers can include details about sending SMS text messages to satisfy regulatory requirements of the Telephone Consumer Protection Act (TCPA).

    • Impact: A new “SMS TEXT MESSAGING” section will include information on SMS message frequency, how to opt out, message and data rates, and support details.

March 14, 2024

  • New Section: Global Privacy Control

    • Purpose: Legal

    • Summary: Customers can specify that they have Global Privacy Control (GPC) enabled on their website.

    • Impact: Under “California Residents,” in the “DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS” section, it will explain that you will honor opt-out preferences if users enact the GPC opt-out signal on their browser.

January 25, 2024

  • New Section: Google Analytics

    • Purpose: Legal

    • Summary: Introduces the ability for customers to specify their use of Google Analytics and list the Google Analytics Advertising Features they have enabled.

    • Impact: A new "Google Analytics" clause will be added under "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" detailing the sharing of information with Google Analytics, listing enabled Advertising Features, and providing opt-out instructions for users.

October 12, 2023

  • Updated Section: US State Laws

    • Purpose: Legal

    • Summary: Adds the option for compliance with the Utah Consumer Privacy Act (UCPA).

    • Impact: Updates the "DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?" section with UCPA-related language, outlining consumer rights and the process to submit requests.

September 21, 2023

  • New Section: US State Laws

    • Purpose: Legal

    • Summary: Extends compliance options to include the Colorado Privacy Act (CPA) and Connecticut Personal Data Privacy and Online Monitoring Act (CTDPA).

    • Impact: The "DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?" section will include language related to the CPA and CTDPA, detailing consumer rights and appeal processes.

  • New Section: Review Your Policy Coverage

    • Purpose: Legal

    • Summary: Provides a page for reviewing privacy law coverage, with options to add laws from additional regions.

    • Impact: Adds a new section "DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?" with specific language for each selected region.

August 31, 2023

  • Updated Section: EEA Representative

    • Purpose: Legal

    • Summary: Allows the addition of separate contact information for Swiss representatives.

    • Impact: The contact information for Swiss representatives will be displayed under "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?"

  • New Section: Swiss Representative Address

    • Purpose: Legal

    • Summary: Enables entry of Swiss representative's contact details.

    • Impact: The Swiss representative's contact information will be listed under "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?"

August 17, 2023

  • New Section: Additional Clause

    • Purpose: General Improvement

    • Summary: Provides an option to add up to 10 custom clauses for policy customization.

    • Impact: Each new clause will be included in the Table of Contents and appear towards the end of the policy before "DO WE MAKE UPDATES TO THIS NOTICE?

February 23, 2023

  • New Section: Name Your Policy

    • Purpose: General Improvement

    • Summary: Offers customization for the title of the privacy policy.

    • Impact: The title at the top of the privacy policy will reflect the chosen name.

January 18, 2023

  • New Section: Virginia (USA) Users

    • Purpose: Legal

    • Summary: Adds an option for a Virginia Consumer Data Protection Act (CDPA) notice.

    • Impact: A new section specific to Virginia residents' privacy rights will detail definitions, rights under the CDPA, and data sale practices.

  • Updated Section: Privacy Email

    • Purpose: Legal

    • Summary: Requires an email address for appeals regarding CDPA compliance.

    • Impact: The email address for appeals will be included under the section for Virginia residents' specific privacy rights.

December 31, 2022

  • Updated Section: Third Parties

    • Purpose: Legal

    • Summary: Updates the option for CCPA compliance from "Disclose and sell" to "Disclose and sell/share," incorporating the CPRA's introduction of the term "share."

    • Impact: The section “DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?” will now reflect "sell or share" wherever "sell" was mentioned previously.

  • Updated Section: Disclosure to Third Parties

    • Purpose: Legal

    • Summary: Allows customers to list the names of third parties they disclose personal information to.

    • Impact: Names of third parties shared with will be listed under “DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?”.

  • New Section: Share with Third Parties

    • Purpose: Legal

    • Summary: Enables customers to list categories of third parties they disclose personal information to.

    • Impact: Categories of third parties shared with will be listed under “DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?”.

  • Updated Sections: California Customer Records Personal Information Categories

    • Purpose: Legal

    • Summary: Requires businesses to specify the retention period for each category of personal information under the CCPA.

    • Impact: The retention period for each category of personal information will be detailed under “DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?”.

  • New Section: Sensitive Personal Information Under the CCPA

    • Purpose: Legal

    • Summary: Asks CCPA-compliant customers to specify the collection and retention of sensitive personal information.

    • Impact: Collection, disclosure, and sharing details of sensitive personal information will be included under “DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?”.

July 29, 2022

  • New Section: California Customer Records Personal Information

    • Purpose: Legal

    • Summary: Introduces a question about collecting, disclosing, or selling personal information as per the California Customer Records statute.

    • Impact: Policy will specify actions regarding personal information listed under the California Customer Records statute in “DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?”.

  • Updated Sections: Address Fields

    • Purpose: General Improvement

    • Summary: Adds the option to include addresses from UK nations and overseas territories.

    • Impact: Updated mailing addresses will be reflected under “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?”.

May 3, 2022

  • Updated Section: English Preference

    • Purpose: General

    • Summary: Offers a choice between American English and British English spelling for the Privacy Policy.

    • Impact: The selected spelling convention will be applied throughout the Privacy Policy.

February 22, 2022

  • Updated Section: User Location

    • Purpose: Legal

    • Summary: Incorporates requirements for PIPEDA and similar provincial laws for Canadian users.

    • Impact: Adds a summary and a new section on legal bases for processing personal information, specific to Canadian law compliance.

  • Updated Section: Use of Information

    • Purpose: Legal

    • Summary: Allows more customization in the description of personal information usage for non-EU/UK users.

    • Impact: Customized uses of personal information will be detailed under “HOW DO WE PROCESS YOUR INFORMATION?”.

  • Updated Section: Marketing and Promotional Communications

    • Purpose: General

    • Summary: Updates opt-out options for marketing communications.

    • Impact: Details on opt-out options for marketing communications will be included under “WHAT ARE YOUR PRIVACY RIGHTS?”.

  • New Section: Sensitive Information

    • Purpose: Legal

    • Summary: Requires listing sensitive information collected from users in the EEA, UK, or Canada.

    • Impact: A new “Sensitive Information” section under “WHAT INFORMATION DO WE COLLECT?” will detail the sensitive information collected.

  • New Sections: Legal Bases for Processing

    • Purpose: Legal

    • Summary: Asks for specific uses of personal information and lawful bases under the GDPR for EU/UK users.

    • Impact: Policy will list specific uses and legal bases for processing personal information under “HOW DO WE PROCESS YOUR INFORMATION?” and a new section on legal bases.

  • New Section: Account Consent Preferences

    • Purpose: Legal

    • Summary: Addresses GDPR requirements for EU/UK user consent revocation.

    • Impact: Details on consent revocation will be included under “WHAT ARE YOUR PRIVACY RIGHTS?”.

  • Other Improvements

    • Purpose: General

    • Summary: Removes language about third-party advertisers related to cookie processing.

    • Impact: Third-party advertisers will no longer be listed in the section on sharing personal information.

September 21, 2021

  • Updated Section: GDPR Considerations

    • Purpose: Legal

    • Summary: Allows inclusion of UK representative contact details.

    • Impact: UK representative information will be added to the Privacy Policy.

September 20, 2021

  • Updated Section: Collection of Information

    • Purpose: General improvement

    • Summary: Restructures generator to ensure all customers detail the personal information they collect.

    • Impact: Customers are prompted to review and update their policy to accurately reflect collected personal information.

August 2, 2021

  • Updated Section: Privacy Policy Uses

    • Purpose: Legal

    • Summary: Permits the addition of mobile or Facebook app names to the Privacy Policy.

    • Impact: The introduction of the Privacy Policy will name the specific mobile or Facebook app.

Detailed release notes were not maintained prior to August 2021. Please contact us if you have any questions.

Related articles