The policy discloses that personal data of EU/EEA, UK, and Swiss residents may be transferred to the United States and other countries, and states that Standard Contractual Clauses approved by the European Commission are used as the transfer mechanism.
This analysis describes what Amplitude's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the legal basis for cross-border data transfers from the EU/EEA, UK, and Switzerland to the US, which requires ongoing adequacy and Schrems II compliance assessment. Organizations subject to GDPR must confirm that Amplitude's SCCs are current, include required supplementary measures where applicable, and cover all relevant data flows.
Interpretive note: The document states SCCs are used but does not specify whether a transfer impact assessment has been conducted or what supplementary measures are in place, creating uncertainty about the completeness of the transfer safeguard framework.
New explicit disclosure of cross-border transfers and legal safeguards, addressing GDPR/UK GDPR requirements post-Schrems II and providing transparency on data localization.
View full change record →Under this clause, personal data of EU/EEA, UK, and Swiss residents is transferred to the United States under Standard Contractual Clauses. Individuals in these jurisdictions retain GDPR-based rights to object to or restrict such transfers in circumstances specified under applicable law.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"If you are located in the European Economic Area, the United Kingdom, or Switzerland, please note that we transfer your personal information to the United States and other countries that may not provide the same level of data protection as your home country. We rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, to transfer your personal information.Excerpt from Amplitude's Privacy Notice
REGULATORY LANDSCAPE: This provision engages GDPR Chapter V (international data transfers), the UK GDPR and ICO's international transfer framework, and Swiss data protection law.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the legal basis for cross-border data transfers from the EU/EEA, UK, and Switzerland to the US, which requires ongoing adequacy and Schrems II compliance assessment. Organizations subject to GDPR must confirm that Amplitude's SCCs are current, include required supplementary measures where applicable, and cover all relevant data flows.
Under this clause, personal data of EU/EEA, UK, and Swiss residents is transferred to the United States under Standard Contractual Clauses. Individuals in these jurisdictions retain GDPR-based rights to object to or restrict such transfers in circumstances specified under applicable law.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Amplitude.