Discord's own privacy policy and CCPA/local-law disclosures state that the company does not sell user personal information and represents that it does not monetize data through advertising, while its policy documents disclose broad categories of collected data (account, content, payment, device, and usage information) and permit sharing of that data with third parties for business and commercial purposes. Discord's corporate/controller structure is disclosed with some specificity (Discord Netherlands BV for EEA users, Discord Inc. for others, plus a UK representative), while the company's regulatory record includes a 2020 FTC Section 6(b) information-demand and a 2024 FTC staff report critical of the surveillance practices of the industry cohort Discord was studied alongside, as well as a series of state attorney general enforcement actions over child-safety and deceptive-practices allegations. New Jersey sued Discord in April 2025 under its Consumer Fraud Act, alleging the company misled parents about the efficacy of its safety controls; Texas sued in May 2026 and, in July 2026, obtained a temporary injunction requiring Discord to age-assure users, change default message and content settings for Texas teens, and report progress to the state every 30 days until final judgment. The Texas Attorney General's office states that Nevada, Indiana and Arkansas have sued as well. These remain allegations pending trial rather than adjudicated findings, and no monetary regulatory penalty against Discord is recorded here.
TRACK RECORD
5 ENFORCEMENT ACTIONS
[2026-07-24]
On July 24, 2026 the Texas Attorney General announced that a court had entered a temporary injunction against Discord, seven weeks after the State filed suit and secured a temporary restraining order. Per the State's account, the order requires Discord to 'route messages from strangers into a separate request inbox, block sensitive content for Texas teens and lock that setting unless it confirms the user is an adult, and close adult-only spaces to anyone it has not age-assured'; Discord 'must report its progress to the Office of the Attorney General every 30 days, the order binds the company until final judgment, and it is enforceable by contempt.' The same release states Texas was not the first state to sue: 'New Jersey sued fifteen months ago, and Nevada, Indiana, and Arkansas have sued as well.' The injunction is interim relief pending trial, not a final judgment of liability.
On May 22, 2026 the Texas Attorney General sued Discord, Inc. for 'allowing child predators to groom and exploit kids while deceiving consumers, parents, and the public about the safety of its platform,' following an investigation the office opened in October 2025. The State seeks age verification under the Securing Children Online through Parental Empowerment (SCOPE) Act, disgorgement of revenue derived from the alleged conduct, and 'civil penalties of up to $10,000 per violation of the DTPA.' These are the State's allegations in a filed suit, not adjudicated findings.
On April 17, 2025 the New Jersey Attorney General and Division of Consumer Affairs sued Discord, Inc. in the Superior Court of New Jersey, Chancery Division, Essex County, alleging multiple violations of the New Jersey Consumer Fraud Act through 'deceptive and unconscionable business practices that misled parents about the efficacy of its safety controls and obscured the risks children faced when using the application.' The suit seeks an injunction, civil penalties and disgorgement. These are allegations in a filed complaint, not adjudicated findings.
In September 2024, an FTC staff report based on responses to the 2020 6(b) orders — covering Discord and eight other companies — found that these firms engaged in vast surveillance of users to monetize personal information while failing to adequately protect children and teens.
In December 2020, the FTC issued a Section 6(b) order to Discord, along with eight other social media and video-streaming companies, requiring the company to provide data on how it collects, uses, and presents personal information, including how its practices affect children and teens.
Discord's privacy policy states that it uses numerous categories of information — including account information, content users create, payment information, device information, and information from other sources — under various legal bases such as GDPR, for the purposes described in the policy.
As assessed by PrivacySpy on 2020-12-11 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the service collect personal data from third parties? — Yes.
A third-party privacy-standard review of Discord's terms found that the service's stated collection includes payment information, device identifiers, IP address, and usage analytics.
Discord's Privacy Policy identifies Discord Netherlands BV as the "data controller" for users in the European Economic Area, Discord Inc. as the data controller for all other users, and discloses a UK representative.
Discord's Privacy Policy discloses that the company is based in the United States and processes and stores user information on servers located in the United States.
As assessed by PrivacySpy on 2020-12-11 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy outline the service's general security practices? — Somewhat.
As assessed by PrivacySpy on 2020-12-11 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy allow personally-targeted or behavioral marketing? — Yes, but you may opt-out.
In response to a 2020 FTC information order, a Discord spokesperson stated publicly that the company does not make money from advertising, does not sell user data to advertisers, and does not share users' personal information with others.
Coverage of Texas Attorney General enforcement activity reports that the office expanded its investigation of Discord over allegations concerning the platform's child-safety and privacy practices, under the state's children's online safety law. That investigation has since produced a filed lawsuit: Texas sued Discord on May 22, 2026 and obtained a temporary injunction on July 24, 2026 requiring age assurance and changed default settings for Texas users pending trial.
In December 2020, the FTC issued a Section 6(b) order to Discord, along with eight other social media and video-streaming companies, requiring the company to provide data on how it collects, uses, and presents personal information, including how its practices affect children and teens.
In September 2024, an FTC staff report based on responses to the 2020 6(b) orders — covering Discord and eight other companies — found that these firms engaged in vast surveillance of users to monetize personal information while failing to adequately protect children and teens.
On April 17, 2025 the New Jersey Attorney General and Division of Consumer Affairs sued Discord, Inc. in the Superior Court of New Jersey, Chancery Division, Essex County, alleging multiple violations of the New Jersey Consumer Fraud Act through 'deceptive and unconscionable business practices that misled parents about the efficacy of its safety controls and obscured the risks children faced when using the application.' The suit seeks an injunction, civil penalties and disgorgement. These are allegations in a filed complaint, not adjudicated findings.
On May 22, 2026 the Texas Attorney General sued Discord, Inc. for 'allowing child predators to groom and exploit kids while deceiving consumers, parents, and the public about the safety of its platform,' following an investigation the office opened in October 2025. The State seeks age verification under the Securing Children Online through Parental Empowerment (SCOPE) Act, disgorgement of revenue derived from the alleged conduct, and 'civil penalties of up to $10,000 per violation of the DTPA.' These are the State's allegations in a filed suit, not adjudicated findings.
On July 24, 2026 the Texas Attorney General announced that a court had entered a temporary injunction against Discord, seven weeks after the State filed suit and secured a temporary restraining order. Per the State's account, the order requires Discord to 'route messages from strangers into a separate request inbox, block sensitive content for Texas teens and lock that setting unless it confirms the user is an adult, and close adult-only spaces to anyone it has not age-assured'; Discord 'must report its progress to the Office of the Attorney General every 30 days, the order binds the company until final judgment, and it is enforceable by contempt.' The same release states Texas was not the first state to sue: 'New Jersey sued fifteen months ago, and Nevada, Indiana, and Arkansas have sued as well.' The injunction is interim relief pending trial, not a final judgment of liability.
Discord's local-privacy-laws disclosure states that the company may combine collected user data with information obtained from other businesses to serve more relevant sponsored content.