OnlyFans updated its privacy policy on June 16, 2026 to state that users have the right to lodge a complaint with OnlyFans and their data protection regulator, rather than only with the regulator. The policy also updated its EU Representative contact information timestamp from September 2025 to June 2026. These changes establish an internal complaint mechanism alongside regulatory channels.
The updated policy now establishes that users have the right to lodge a complaint directly with OnlyFans in addition to lodging complaints with their data protection regulator. This creates a two-channel complaint process. Previously, the policy only referenced the right to lodge complaints with the regulator. Users can now direct data protection complaints to OnlyFans before or concurrently with regulatory channels.
The updated terms establish an internal complaint mechanism for data protection issues, ensuring users have a documented channel to raise concerns with OnlyFans directly. This clarifies user rights and creates a procedural obligation for OnlyFans to receive and process such complaints.
Updated to establish direct complaint channel with OnlyFans in addition to regulator complaints.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
OnlyFans updated its privacy policy to establish an internal complaint mechanism for data protection matters, adding a requirement to accept complaints from users directly. This aligns with GDPR requirements for organizations to provide complaint procedures independent of regulatory filing. The change also updated administrative metadata (EU Representative contact timestamp). No new enforcement obligations appear to be created, as GDPR generally requires such mechanisms. Organizations should confirm their complaint intake procedures are documented and monitored.
GDPR (Article 77 establishes right to lodge complaints with supervisory authorities; Article 12-13 imply right to communicate with controller). The change appears to reflect rather than exceed GDPR baseline requirements.
Full compliance analysis
Obligation analysis, escalation trigger, board language, and recommended action.
Monitor: regulatory citations + obligations. Compliance: full compliance memo.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003012.
See the full side-by-side comparison of every sentence added, removed, and modified.
🔒 Full diff — MonitorNetflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the …
TikTok's data collection extends to device sensors, clipboard content, geolocation, and cross-site tracking. Here is what their Privacy Pol…
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get alerted when this policy changes again — including what changed and why it matters.
Prefer a weekly summary instead?
Get the biggest policy changes across 320+ platforms every Sunday.