Cloudhealth

Structured Summary of Important Changes

1. AI-Model Training

• No express changes address AI, machine learning, model training, model improvement, or use of customer data to train AI models.
• The diff does not add any language granting Broadcom or its partners rights to use customer content, account data, communications, or other customer-provided information for AI training.
• The revised cookie language refers to analytics, personalization, advertising, and website performance—not AI training.
• Risk: The absence of an AI-training provision does not necessarily mean customer data cannot be used for that purpose. Other contractual documents, privacy policies, product terms, or incorporated policies may contain such rights. Those documents should be reviewed separately.

2. Expanded Advertising and Profiling Disclosure

The cookie notice is substantially rewritten:

• Targeting cookies are now described as potentially being set by Broadcom’s advertising partners.
• Partners may use these cookies to:
• Build a profile of the visitor’s interests;
• Show relevant advertisements on other websites; and
• Identify the browser or internet device through unique identifiers.
• The revised language expressly states that these cookies may not directly store personal information, but may nevertheless support cross-site behavioral advertising.

Risk: This is a clearer acknowledgment of third-party advertising, profiling, and potentially cross-context tracking. Depending on jurisdiction, this may constitute “sale,” “sharing,” targeted advertising, or profiling of personal information and may trigger consent, opt-out, or disclosure obligations.

3. Changed Description of Performance Analytics

Performance cookies are now described as allowing Broadcom to:

• Count visits and traffic sources;
• Measure and improve website performance;
• Determine which pages are most or least popular; and
• Analyze how visitors move around the site.

The revised language states that the resulting information is aggregated and anonymous.

Risk: Calling data “aggregated” or “anonymous” does not eliminate privacy obligations if the underlying data can reasonably be linked to a person, device, account, or browsing activity.

4. Consent and Functionality

The revised notice states that:

• Functional cookies may be provided by Broadcom or third-party service providers.
• Refusing functional cookies may cause some services to malfunction.
• Refusing performance cookies prevents Broadcom from knowing when a visitor visited the site and from monitoring performance.
• Refusing targeting cookies results in less targeted advertising.
• Users can manage preferences or block cookies through browser settings.

Risk: The language should be checked against the actual consent mechanism. Non-essential advertising and analytics cookies generally should not be activated before valid consent where required by law.

5. Tracking and Data Collection Code

The diff retains or introduces extensive tracking functionality, including:

• Google Tag Manager/Data Layer events;
• Video-play, progress, and completion tracking;
• Email, telephone, social-media, outbound-link, and file-download tracking;
• Collection of link text, URLs, domains, page information, and engagement data;
• Removal or masking of certain PII in URL query parameters.

Risk: Even where names and emails are removed, URLs, event data, device identifiers, and behavioral history may remain personal data. Data sharing with analytics, advertising, hosting, and other partners should be clearly disclosed and appropriately controlled.

Summary

The diff only states that approximately 231 words were removed from the document. The actual deleted language is not provided.

Key Legal Implications

• Substantive analysis is not possible: Without the text that was removed, it is impossible to determine whether the changes affect liability, payment terms, termination, confidentiality, intellectual property, data protection, or other obligations.
• AI training and data use: The provided diff does not identify whether any language concerning the customer’s data was added, deleted, or modified. In particular, it is not possible to determine whether the contract:
• Permits or prohibits using customer data to train AI or machine-learning models;
• Requires customer consent for model training;
• Allows use of customer content for product improvement, analytics, or benchmarking;
• Requires anonymization, aggregation, or de-identification before such use;
• Gives the customer an opt-out right; or
• Limits retention, disclosure, or use of data after termination.
• Potential risk: Deleting approximately 231 words could remove customer protections or limitations on the provider’s rights, but the direction and significance of the risk cannot be assessed from the summary alone.

Information Needed

Please provide the actual deleted text, preferably with the surrounding unchanged provisions. The redline should show the specific words removed, rather than only stating the approximate number of words deleted.