Provision record
Apple App Store · Apple Privacy Policy · View original document ↗

Cross-Border Data Transfer Framework

Medium severity Medium confidence Explicit document language Unique · 0 of 352 platforms
Stay ahead of the changes
Track Apple App Store and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

Apple designates Apple Distribution International Limited in Ireland as the data controller for EEA, UK, and Switzerland personal data, uses Standard Contractual Clauses to govern international transfers from those regions, and states that personal data collected globally is generally stored by Apple Inc. in the United States.

This analysis describes what Apple App Store's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision identifies the specific legal entity responsible for EEA, UK, and Swiss user data, establishes Standard Contractual Clauses as the transfer mechanism for data leaving those regions, and discloses that global data is generally stored in the United States, which is the operative data processing jurisdiction for most Apple users.

Interpretive note: The policy does not specify whether transfer impact assessments have been completed for US-bound data transfers, and the current version of Apple's SCCs is not reproduced in the document, creating uncertainty about whether they reflect the 2021 EU Commission-approved templates.

Clause Stability Stable

0
Changes
5
Months Monitored
Jul 9, 2026
First Seen
Jul 9, 2026
Last Seen

Consumer impact (what this means for users)

The agreement establishes that EEA, UK, and Switzerland personal data is controlled by Apple Distribution International Limited in Ireland and transferred internationally under Standard Contractual Clauses. Users in those regions can request a copy of Apple's Standard Contractual Clauses by contacting Apple at apple.com/legal/privacy/contact.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    Submit a request at apple.com/legal/privacy/contact to obtain a copy of Apple's Standard Contractual Clauses governing international data transfers from the EEA, UK, or Switzerland.

Cross-platform context

See how other platforms handle Cross-Border Data Transfer Framework and similar clauses.

Compare across platforms →
▸ View Original Clause Language DOCUMENT RECORD
"
Personal data relating to individuals in the European Economic Area, the United Kingdom, and Switzerland is controlled by Apple Distribution International Limited in Ireland. Apple's international transfer of personal data collected in the European Economic Area, the United Kingdom, and Switzerland is governed by Standard Contractual Clauses. Personal data collected by Apple or an Apple-affiliated company worldwide is generally stored by Apple Inc. in the United States. Regardless of where your personal data is stored, Apple maintains the same high level of protection and safeguarding measures.

Excerpt from Apple App Store's Apple Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

1.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • State Attorney General
    State AGs in California, New York, Texas, and other states can investigate violations of state consumer protection and privacy laws, including CCPA (California), SHIELD Act (New York), and equivalents.
    Who can file: Residents of states with comprehensive privacy laws — primarily California, Virginia, Colorado, Connecticut, and Utah
    What you need: Evidence of the violation, explanation of how your state rights were affected, and your account or contact information with the company
    What to expect: Outcomes vary by state. May result in investigation, enforcement action, or requirement for the company to change practices. No direct individual compensation in most cases.

    Search "[your state] attorney general consumer complaint" to find your state's direct complaint form

Provision details

Document information
Document
Apple Privacy Policy
Entity
Apple App Store
Document last updated
May 5, 2026
Tracking information
First tracked
April 27, 2026
Last verified
July 9, 2026
Record ID
CA-P-016130
Document ID
CA-D-00024
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
cbbabe376f04eb7a801fba2b08f0b6fdada46061a4e36ff35f705039d8843f2a
Analysis generated
April 27, 2026 10:36 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Apple App Store
Document: Apple Privacy Policy
Record ID: CA-P-016130
Captured: 2026-04-27 10:36:19 UTC
SHA-256: cbbabe376f04eb7a…
URL: https://conductatlas.com/platform/apple-app-store/apple-privacy-policy/provision/CA-P-016130/cross-border-data-transfer-framework/
Accessed: Aug. 11, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Apple App Store's Cross-Border Data Transfer Framework clause do?

This provision identifies the specific legal entity responsible for EEA, UK, and Swiss user data, establishes Standard Contractual Clauses as the transfer mechanism for data leaving those regions, and discloses that global data is generally stored in the United States, which is the operative data processing jurisdiction for most Apple users.

How does this clause affect you?

The agreement establishes that EEA, UK, and Switzerland personal data is controlled by Apple Distribution International Limited in Ireland and transferred internationally under Standard Contractual Clauses. Users in those regions can request a copy of Apple's Standard Contractual Clauses by contacting Apple at apple.com/legal/privacy/contact.

Is ConductAtlas affiliated with Apple App Store?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Apple App Store.