New Google Play Policy UPDATE!

Hello guys, I got email that Google Play updated policy again. My biggest concern is.

• We're updating our User Data policy to align with changes to the Google Play Developer Distribution Agreement to reflect our reliance on standard contractual clauses to transfer personal data from the European Economic Area or the UK to the U.S. as of July 2020.

Like many my competitors in market I have some sensitive permissions, like read
phone book, camera and microphone.

Personal and Sensitive Information

Personal and sensitive user data includes, but isn't limited to, personally identifiable information, financial and payment information, authentication information, phonebook, contacts, device location, SMS and call related data, microphone, camera, and other sensitive device or usage data. If your app handles sensitive user data, then you must:

• Limit your access, collection, use, and sharing of personal or sensitive data acquired through the app to purposes directly related to providing and improving the features of the app (e.g., user anticipated functionality that is documented and promoted in the app's description in the Play Store). Apps that extend usage of this data for serving advertising must be in compliance with our Ads Policy.
• Post a privacy policy in both the designated field in the Play Console and within the app itself. The privacy policy must, together with any in-app disclosures, comprehensively disclose how your app accesses, collects, uses, and shares user data. Your privacy policy must disclose the types of personal and sensitive data your app accesses, collects, uses, and shares and the types of parties with which any personal or sensitive user data is shared.
• Handle all personal or sensitive user data securely, including transmitting it using modern cryptography (for example, over HTTPS).
• Use a runtime permissions request whenever available, prior to accessing data gated by Android permissions.
• Not sell personal or sensitive user data.

Prominent Disclosure & Consent Requirement
In cases where users may not reasonably expect that their personal or sensitive user data will be required to provide or improve the policy compliant features or functionality within your app (e.g., data collection occurs in the background of your app), you must meet the following requirements:
You must provide an in-app disclosure of your data access, collection, use, and sharing. The in-app disclosure:

• Must be within the app itself, not only in the app description or on a website;
• Must be displayed in the normal usage of the app and not require the user to navigate into a menu or settings;
• Must describe the data being accessed or collected;
• Must explain how the data will be used and/or shared;
• Cannot only be placed in a privacy policy or terms of service; and
• Cannot be included with other disclosures unrelated to personal or sensitive data collection.

Your in-app disclosure must accompany and immediately precede a request for user consent and, where available, an associated runtime permission. You may not access or collect any personal or sensitive data until the user consents. The app's request for consent:

• Must present the consent dialog clearly and unambiguously;
• Must require affirmative user action (e.g. tap to accept, tick a check-box);
• Must not interpret navigation away from the disclosure (including tapping away or pressing the back or home button) as consent; and
• Must not use auto-dismissing or expiring messages as a means of obtaining user consent.

Source: https://support.google.com/googleplay/android-developer/answer/10144311

So in one place it says that we need to have this info in policy page, in another place it says that it is
not enough, from this saying basically we need to have big check box after app is opened.

Another day , another nightmare in dev's life .

I saw notice , if you can implement with policy page , do it now , test with one app , if it pass review - you're good