Salesforce updated its Privacy Statement effective May 19, 2026, with several operational changes. The company added new links to compliance resources including a Data Privacy Framework reference and South Africa PAIA Manual, updated its transparency reporting to include H2 2025 data, added an HDS 2.0 FAQ for data transfer guidance, and revised dispute resolution language. The statement also expanded the purposes for which it processes personal data, adding explicit categories for handling support requests, providing services, developing service performance, personalized interactions, and training/certification programs.
Data controllers using Salesforce: Organizations using Salesforce may need to update their own privacy notices to reflect these additional processing purposes.
The updated Privacy Statement clarifies the purposes for which Salesforce processes personal data, adding explicit categories for handling support requests, providing and optimizing services, personalizing interactions, and managing training and certification programs. The statement now references additional compliance frameworks and dispute resolution procedures. These changes primarily reflect clarification and expansion of existing practices rather than introduction of new data collection categories.
Added explicit categories for support requests, service delivery, service optimization, personalized interactions, and certification programs.
Removed specific TRUSTe watchdog reference; replaced with general commitment to fair resolution.
Added Data Privacy Framework, South Africa PAIA Manual, and HDS 2.0 FAQ links.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Salesforce revised its Privacy Statement to expand the stated purposes for data processing and add references to compliance frameworks (Data Privacy Framework, HDS 2.0, South Africa PAIA Manual). The change is effective May 19, 2026. …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-X-005619.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
Get alerted when this policy changes again, including what changed and why it matters.