{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.0.0","mappingVersion":"2026-07-29.1","changeId":"16f9b187-89de-400c-ab73-df87ef192fe0","screeningDate":"2026-10-01T19:52:57.942Z","publicationGate":"published","company":{"id":"abeee5e5-6930-4e28-995a-552c200bc853","name":"X (Twitter)","slug":"x-twitter","industry":"Social Media"},"policy":{"id":"f2b77af5-3705-4573-94a5-10153d76e7f5","name":"Terms of Service","type":"terms","jurisdiction":"Global","sourceUrl":"https://x.com/en/tos"},"sourceConfidence":{"state":"verified-retrieval","lastCheckedAt":"2026-10-01T19:52:57.932Z","retrievalChannel":"direct","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":2,"sha256":"5810170daf41610403b6ab7147cf822b9691a2bdd52071cdd94d07459a97cd9d","capturedAt":"2026-09-23T17:20:48.872Z"},"current":{"version":3,"sha256":"dbf213c2130ff856c3ad554f8f6ec6e16e03191188e4acf97a3545e74ea8fd5e","capturedAt":"2026-10-01T19:52:57.936Z"}},"assessment":{"summary":"The X Terms of Service update is minor, changing only the company's address; no significant policy shifts for users or data were introduced.","overallRisk":"Low","overallScore":3,"previousPublicChange":{"id":"3c6dfbb5-a0fa-4edb-81b0-62bb9203baa0","overallRisk":"High","overallScore":8,"screeningDate":"2026-09-23T17:20:48.877Z"},"scoreDelta":-5,"direction":"lower","reasons":[{"icon":"info","textEn":"Minor administrative update to company address.","textIt":"Aggiornamento amministrativo minore dell'indirizzo aziendale.","deltaScore":0,"evidenceQuote":"registered office","evidenceSide":"old","relatedKpi":null,"anchorStatus":"verified"},{"icon":"info","textEn":"No new clauses impacting user data collection or sharing.","textIt":"Nessuna nuova clausola su raccolta o condivisione dati utente.","deltaScore":0,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":"kpiDataCollection","anchorStatus":"not-recorded"},{"icon":"info","textEn":"No changes to AI training data usage or user opt-out options.","textIt":"Nessun cambiamento sull'uso dei dati per AI o opzioni di opt-out.","deltaScore":0,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":"kpiAiTrainingOptOut","anchorStatus":"not-recorded"}],"keyPoints":[{"textEn":"Minor administrative update to company's address from 'registered office' to 'principal place of business'.","textIt":"Aggiornamento amministrativo minore dell'indirizzo aziendale da 'sede legale' a 'sede principale di attività'.","sentiment":"neutral"},{"textEn":"No new clauses introduced regarding user data collection, sharing, or retention practices.","textIt":"Nessuna nuova clausola introdotta riguardo alla raccolta, condivisione o conservazione dei dati utente.","sentiment":"neutral"},{"textEn":"Existing broad license for user content, including for AI model training, remains unchanged.","textIt":"La licenza ampia esistente per i contenuti utente, inclusa la formazione di modelli AI, rimane invariata.","sentiment":"negative"},{"textEn":"Existing provisions for cross-border data transfers to the US, Ireland, and other countries are maintained.","textIt":"Le disposizioni esistenti per i trasferimenti di dati transfrontalieri verso USA, Irlanda e altri paesi sono mantenute.","sentiment":"negative"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Companies using X must consider the broad content license and data transfer implications for their own GDPR and AI Act compliance. No new changes affect this.","complianceNoteEn":"GDPR, AI Act"},{"region":"EU","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"The policy's broad content license and data transfers to the US remain, impacting GDPR compliance. Users have redress mechanisms under DSA/OSA for enforcement actions.","complianceNoteEn":"GDPR, DSA, AI Act"},{"region":"Global","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Enterprises must assess the implications of broad content licensing and data processing for their global operations and compliance frameworks. No new changes alter this assessment.","complianceNoteEn":null},{"region":"Global","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"Users worldwide grant a broad license for content and data transfer, including for AI training. Awareness of these terms is crucial for personal data and content rights.","complianceNoteEn":null},{"region":"US","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Businesses should assess the broad content licensing and data usage for AI training when integrating X services. This impacts intellectual property and data governance strategies.","complianceNoteEn":"State Privacy Laws"},{"region":"US","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"Users grant a broad license for content, including AI training, with data transferred to the US. Dispute resolution is set in Texas, potentially limiting local consumer protections.","complianceNoteEn":"CCPA/CPRA"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAiTrainingOptOut","label":"AI training opt-out","value":"Not Available"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Partial"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiContentModeration","label":"Content moderation","value":"Partial"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Implicit"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original Terms of Service source still match the recorded public snapshot version 3?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/16f9b187-89de-400c-ab73-df87ef192fe0","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"f53f5b9be72e8137b97c4534d1a8414c5e6c39aa35edeccb9438eb12d2e7be41"}