Omnicom Group
Communication Services
40
out of 100. Number 303 of 512, counting from the worst.
Where Omnicom Group does well
- Arbitration 2 of 20. Few problems found.
- Renewals 2 of 20. Few problems found.
- The notice states plainly: 'We do not and will not sell your personal information.'
- Under the Data Privacy Framework policy, Omnicom gives consumers 'an opportunity to opt out of sharing their Personal Data with thirdparty Controllers' and 'obtains optin consent for certain uses and disclosures of Sensitive Data.'
- Retention is defined, not open-ended: 'We retain personal data only for as long as is necessary for the purposes described in this Privacy Notice, after which it is deleted from our systems' — with specific notes on event/campaign and unsuccessful-candidate data.
- Deletion requests propagate: 'If we have shared your personal data with others, we will let them know about the deletion where possible.'
- DPF disputes go to JAMS mediation 'at no cost to you' with possible FTC referral — a genuine consumer remedy, not a forced-arbitration trap.
- Marketing opt-out is documented ('To opt-out of any future promotional or marketing communications... send a request to us') and California rights include non-discrimination for exercising them.
Omnicom discloses your identifiers, online activity, and other personal data to advertising networks, data analytics providers, internet service providers and social networks — while elsewhere in the same document stating it does not 'sell' personal information.
The fine print
6 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
Omnicom discloses your identifiers, online activity, and other personal data to advertising networks, data analytics providers, internet service providers and social networks — while elsewhere in the same document stating it does not 'sell' personal information.
During the 12-month period prior to the effective date of this Statement, we may have shared your personal information with certain categories of third parties... We may have disclosed the following categories of personal information about you for a business purpose to the following categories of third parties: Identifiers [to] Our affiliates and subsidiaries; Vendors who provide services on our behalf; Professional services organizations... Our business partners; Advertising networks; Internet service providers; Data analytics providers; Operating systems and platforms; Social networks
California Consumer Privacy Statement (within Online Privacy Notice)
-
Omnicom builds psychological profiles of you — your predispositions, attitudes, psychological trends — and that inference data is among the categories shared with ad networks and analytics providers for business purposes.
Inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
California Consumer Privacy Statement (within Online Privacy Notice)
-
Omnicom sends you marketing email/phone messages on the basis of its own 'legitimate interest' — consent is only 'sometimes' obtained. Your only recourse is opting out by emailing them.
We may use your Identity Data, Contact Data and Profile Data to send you (or the organization you represent) marketing communications by email or via phone... It is in our legitimate interest to use your personal data in this way to ensure the promotion of our services is tailored and/or appealing to you and/or the organization you work for although sometimes we may also obtain your consent.
-
Your data can enter Omnicom's systems without you ever touching them — bought from data brokers, pulled from social networks, or taken from government sources.
During the 12-month period prior to the effective date of this Statement, we may have obtained personal information about you from the following categories of sources: ... Data brokers ... Social networks ... Government entities
California Consumer Privacy Statement (within Online Privacy Notice)
-
Terms can change at any time by posting; email notice of 'significant' changes is only a maybe — the burden is on you to re-read the policy periodically.
We will update this Privacy Notice from time to time to reflect any changes or proposed changes to our use of your personal data... We may notify you by email of any significant changes to this Privacy Notice, but we encourage you to review this Privacy Notice periodically to keep up to date on how we use your personal data.
Online Privacy Notice, section 3 (Changes to this Privacy Notice)
-
Exercising your privacy rights can require you to name an Omnicom rep you dealt with and when, sign a sworn declaration under penalty of perjury, and possibly pay a fee — heavy friction for a corporate marketing site visitor.
If you request access to or deletion of your personal information, we may require you to provide any of the following information: your email address, the name of the Omnicom representative with whom you typically interact, and the date of your last interaction with an Omnicom representative. In addition, if you ask us to provide you with specific pieces of personal information, we will require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request... To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.
California Consumer Privacy Statement (within Online Privacy Notice)
How these were found
Documents relied on: (1) Omnicom Group 'Online Privacy Notice' at https://www.omc.com/privacy-notice/ — 'Last Updated: February 2025' (omnicomgroup.com now redirects to omc.com; this is the current consumer-facing notice for Omnicom Group Inc.); (2) 'Data Privacy Framework: Consumer Privacy Policy' at https://www.omnicomgroup.com/wp-content/uploads/2026/01/Data-Privacy-Framework-Consumer-Privacy-Policy.pdf — 'Last Updated: May 9, 2025'. ACCESS LIMITATIONS: the privacy notice links to a 'Website Terms of Use' page, but the text-fetch tool could not retrieve it (outlink on the JS-rendered site resolved to an unrelated page, then to LinkedIn). No arbitration, indemnification, or unilateral-term clauses from Omnicom's own Terms of Use were reviewable — the arbitration/autorenew scores reflect absence of evidence, not confirmed clean terms. The California Consumer Privacy Statement embedded in the notice is dated July 31, 2020 and appears stale relative to the Feb-2025 notice. The legacy omnicommediagroup.com/privacynotice/ URL cited in OMG Italy's cookie policy now returns 404. OMG Italy docs (in Italian, 2021) were referenced for corroboration but not relied on as current US-corporate terms.
These notes come from the original draft and are not independent verification.