The policy states that EEA and UK personal data transferred outside those regions is covered by either European Commission adequacy decisions under Article 45 GDPR or Standard Contractual Clauses under Article 46 GDPR, with equivalent mechanisms for UK and Switzerland transfers, and that Brazil transfers rely on ANPD-approved SCCs.
This analysis describes what Anthropic's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the legal transfer mechanisms supporting Anthropic's global data flows for EEA, UK, Swiss, and Brazilian personal data, and specifies reliance on GDPR Articles 45 and 46 mechanisms. Compliance teams should verify that SCCs are executed with all relevant processors and that the subprocessor list referenced in the Trust Center is current.
Under this clause, personal data from EEA, UK, and Swiss users is transferred to the US and other countries under Standard Contractual Clauses or adequacy decisions; Brazilian users' data is transferred under ANPD-approved SCCs; Canadian users are disclosed that data may be transferred to jurisdictions with less stringent data protection laws.
Cross-platform context
See how other platforms handle Cross-Border Data Transfer Mechanisms and similar clauses.
Compare across platforms →"Where Anthropic transfers information outside the EEA or the UK, we ensure it benefits from an adequate level of data protection by relying on: Adequacy decisions: These are decisions from the European Commission under Article 45 GDPR (or equivalent decisions under other laws) where they recognize that a country outside of the EEA offers an adequate level of data protection. We transfer your information as described in 'Collection of Personal Data' to some countries with adequacy decisions, such as the countries with EU adequacy decisions listed here and countries with UK adequacy decisions listed here; or Standard contractual clauses: The European Commission has approved contractual clauses under Article 46 GDPR that allows companies in the EEA to transfer data outside the EEA. These (and their approved equivalent for the UK and Switzerland) are called standard contractual clauses. We rely on standard contractual clauses to transfer information as described in 'Collection of Personal Data' to certain affiliates and third parties in countries without an adequacy decision.Excerpt from Anthropic's Privacy Policy (Superseded Capture)
REGULATORY LANDSCAPE: This provision engages GDPR Articles 45 and 46, UK GDPR equivalent provisions, Swiss Federal Act on Data Protection transfer requirements, and Brazil's LGPD international transfer framework as administered by the ANPD.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the legal transfer mechanisms supporting Anthropic's global data flows for EEA, UK, Swiss, and Brazilian personal data, and specifies reliance on GDPR Articles 45 and 46 mechanisms. Compliance teams should verify that SCCs are executed with all relevant processors and that the subprocessor list referenced in the Trust Center is current.
Under this clause, personal data from EEA, UK, and Swiss users is transferred to the US and other countries under Standard Contractual Clauses or adequacy decisions; Brazilian users' data is transferred under ANPD-approved SCCs; Canadian users are disclosed that data may be transferred to jurisdictions with less stringent data protection laws.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Anthropic.