ClickUp replaced its previous privacy rights section with a structured enumeration of data subject rights aligned with GDPR and similar data protection frameworks. The prior policy listed general opt-out mechanisms and data access procedures; the updated policy explicitly states eight distinct rights including access, rectification, erasure, restriction, portability, objection, consent withdrawal, and complaint filing. This change makes individual rights more formally defined and legally referenced rather than operationally described.
The updated policy now explicitly recognizes eight distinct data subject rights, including rights to access, correct, delete, restrict processing, receive data in portable format, object to processing, withdraw consent, and lodge complaints with regulators. Previously, ClickUp described privacy controls through general opt-out options and data access procedures without formal legal framing. The revised language aligns with GDPR and similar data protection frameworks, providing clearer legal reference points for how users may exercise control over their personal data. You can exercise these rights by contacting ClickUp's support team.
The updated policy formalizes ClickUp's recognition of data subject rights under GDPR and equivalent frameworks, providing users and regulators with explicit legal reference points for exercising control over personal data. Organizations that process customer data through ClickUp should verify the formalized rights are reflected in their DPAs and privacy notices to ensure compliance obligations are accurately stated.
→ Review the eight explicitly listed rights in the updated policy to understand available data controls
→ Contact ClickUp support at support@clickup.com to exercise specific rights such as data access, correction, deletion, or portability
→ For EU residents, consider reviewing the right to lodge a complaint with a supervisory authority if data rights are not fulfilled
→ Users will not be able to exercise formally recognized data subject rights unless they affirmatively request to do so through the stated contact procedures
→ Organizations that have not updated their privacy notices or vendor contracts may create inconsistency between stated policies and ClickUp's actual rights frameworks
Replaced informal opt-out procedures with eight formally named GDPR-aligned rights including access, rectification, erasure, restriction, portability, objection, consent withdrawal, and complaint filing.
Prior language stating opt-out may render platform features ineffective is absent from updated rights framework, creating ambiguity about practical consequences of exercising new rights.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
ClickUp replaced informal privacy controls with formally structured GDPR-aligned data subject rights. This change engages GDPR Article 12-22 frameworks and signals regulatory alignment with EEA data protection law. Organizations that include ClickUp in their vendor ecosystem should evaluate whether this change affects existing DPA language, data processing schedules, or privacy notice requirements. The shift from operational descriptions to legal rights frameworks may require updating internal privacy documentation and vendor contract schedules to reflect the formalized rights infrastructure.
GDPR (Articles 12-22 covering data subject rights), UKDPA 2018, equivalent EEA data protection frameworks. Change signals regulatory alignment rather than new risk exposure.
Full compliance analysis
Obligation analysis, escalation trigger, board language, and recommended action.
Monitor: regulatory citations + obligations. Compliance: full compliance memo.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-002627.
See the full side-by-side comparison of every sentence added, removed, and modified.
🔒 Full diff — MonitorGet alerted when this policy changes again — including what changed and why it matters.
Prefer a weekly summary instead?
Get the biggest policy changes across 320+ platforms every Sunday.