{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.0.0","mappingVersion":"2026-07-29.1","changeId":"f863326f-229b-4494-8b13-239f8fcd72a4","screeningDate":"2026-07-24T20:56:45.188Z","publicationGate":"published","company":{"id":"3e20dca5-ce3f-4e7e-930c-7aa4753a789d","name":"Google","slug":"google","industry":"Tech Giant"},"policy":{"id":"4b255c8b-197c-4046-b848-bce7e1485583","name":"Privacy Policy","type":"privacy","jurisdiction":"EU","sourceUrl":"https://policies.google.com/privacy"},"sourceConfidence":{"state":"review-required","lastCheckedAt":"2026-07-06T03:59:34.658Z","retrievalChannel":"seeded","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":1,"sha256":"410848ec3d75cfcf98683d565fd9089794766553a7b65fe19b462f740dfde91f","capturedAt":"2026-07-06T07:19:23.153Z"},"current":{"version":2,"sha256":"1c28ab187c38f58e8028b79637ebf0943028dc3541b45553f3e059b8b3daf6c2","capturedAt":"2026-07-24T20:56:45.180Z"}},"assessment":{"summary":"Google's policy update improves structure and hints at clearer data transfer rules, but extensive data collection practices persist.","overallRisk":"Medium","overallScore":6,"previousPublicChange":null,"scoreDelta":null,"direction":"baseline","reasons":[{"icon":"info","textEn":"Policy structure improved for better navigation and clarity.","textIt":"Struttura della policy migliorata per navigazione e chiarezza.","deltaScore":1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"},{"icon":"info","textEn":"Explicit mention of data transfer regulations in the table of contents.","textIt":"Menzione esplicita delle normative sul trasferimento dati nell'indice.","deltaScore":1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"},{"icon":"warning","textEn":"Extensive data collection for personalization and advertising persists.","textIt":"L'ampia raccolta dati per personalizzazione e pubblicità persiste.","deltaScore":-2,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"}],"keyPoints":[{"textEn":"Policy structure improved for better navigation and clarity.","textIt":"Struttura della policy migliorata per una migliore navigazione e chiarezza.","sentiment":"positive"},{"textEn":"New section on data transfer regulations implies stronger compliance focus.","textIt":"Nuova sezione sulle normative per il trasferimento dati implica un focus maggiore sulla conformità.","sentiment":"positive"},{"textEn":"Extensive data collection for personalization and advertising continues.","textIt":"L'ampia raccolta dati per personalizzazione e pubblicità continua.","sentiment":"negative"},{"textEn":"Users retain robust control over their privacy settings and data.","textIt":"Gli utenti mantengono un controllo robusto sulle impostazioni di privacy e sui dati.","sentiment":"positive"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Google's explicit reference to data transfer regulations in the TOC indicates a structured approach to cross-border data flows. This helps enterprises understand Google's commitment to GDPR and potential AI Act compliance.","complianceNoteEn":"GDPR Compliance"},{"region":"EU","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"The new policy structure, especially the mention of data transfer regulations, offers better transparency for GDPR compliance. Users can more easily find information on how their data is handled internationally.","complianceNoteEn":"GDPR Art. 44-50"},{"region":"Global","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"The structural updates and explicit mention of data transfer regulations provide a clearer framework for global compliance. This aids enterprises in assessing Google's adherence to diverse international data protection laws.","complianceNoteEn":"Global Data Governance"},{"region":"Global","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"All global users benefit from the improved policy structure and navigation, making it easier to understand data practices. However, the extensive data collection remains a key consideration for personal privacy.","complianceNoteEn":"Enhanced Transparency"},{"region":"US","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"The policy's core data practices are consistent with existing US privacy frameworks. The improved structure may aid enterprises in understanding Google's data handling, but no significant new obligations are introduced.","complianceNoteEn":"Standard US Practices"},{"region":"US","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"The policy maintains extensive data collection practices common in the US market, but user controls remain robust. The structural improvements enhance clarity for users seeking to manage their privacy under laws like CCPA/CPRA.","complianceNoteEn":"CCPA/CPRA Rights"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":3,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Mentioned"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Partial"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Mentioned"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Comprehensive"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Mentioned"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Partial"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiContentModeration","label":"Content moderation","value":"Opaque"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Opt-Out"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Mentioned"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original Privacy Policy source still match the recorded public snapshot version 2?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/f863326f-229b-4494-8b13-239f8fcd72a4","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"e99d7afff3a7975b891f16a5792b4999394463ab47d7689de7963ebd29956007"}