Comcast Xfinity

Comcast was one of six ISPs the FTC studied under compulsory 6(b) orders, and the report's findings are the row's substance: the studied ISPs combine data across product lines, merge personal, app-usage and web-browsing data for ad targeting, sort customers into sensitive categories including by RACE and SEXUAL ORIENTATION, and share real-time location data with third parties - while several simultaneously promise not to 'sell' your data, a promise the FTC found technically true and practically meaningless because the data is still used, transferred and monetised by others. The report also found that what ISPs returned in response to access requests was often 'indecipherable or nonsensical without context', which it said potentially led to low numbers of access requests - the studied ISPs reported receiving between zero and 380 access requests per month. Comcast's privacy policy also spans Xfinity internet, mobile and TV as one document, so the cross-product combining the FTC described is structural, not incidental.

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-08-04

Primary source. None recorded — Unverified - heuristic first draft.

Arbitration

Binding arbitration (Section 13) + jury trial waiver (14) + class/collective/representative action waiver (15), all explicitly broken into separate numbered sections; 30-day opt-out from first service activation via xfinity.com/arbitrationoptout or mail; opting out for one Comcast account (e.g., Mobile) does NOT cover other accounts (e.g., Internet) — must opt out separately per account.

Contacts

Privacy contact. Not recorded.

Legal notice. PUBLIC COMPANY (CMCSA). Service route: c/o General Counsel / Corporate Secretary, Philadelphia, Pennsylvania — the corporate address on the SEC Form 10-K cover page is the official address of record. Confirm the exact street address on the current 10-K at sec.gov/edgar, and check the state-of-incorporation registered agent (usually Delaware; most large filers use The Corporation Trust Company or Corporation Service Company) via the Secretary of State business-entity search. A registered agent MUST accept service, which is why it is the reliable channel when a company publishes no privacy address.

Mailing address. Not recorded.