The notice states that AWS participates in the EU-US Data Privacy Framework, its UK Extension, and the Swiss-US Data Privacy Framework as the legal mechanism governing transfer of personal data from those jurisdictions to the United States.
This analysis describes what AWS's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Participation in the EU-US Data Privacy Framework provides the legal basis for personal data transfers from the EEA, UK, and Switzerland to the United States under GDPR and equivalent frameworks. The operational durability of this mechanism is subject to ongoing legal and political developments, and organizations relying solely on DPF certification for cross-border transfer compliance should maintain contingency planning for alternative mechanisms such as standard contractual clauses.
Interpretive note: The operational durability of the EU-US Data Privacy Framework as a transfer mechanism is subject to ongoing legal and political developments, and its continued adequacy cannot be assumed without monitoring.
Under this provision, personal data of EEA, UK, and Swiss users transferred to and processed in the United States is governed by the EU-US Data Privacy Framework. Users in these jurisdictions retain rights under GDPR and equivalent frameworks, including the ability to lodge complaints with their local supervisory authority.
Cross-platform context
See how other platforms handle EU-US Data Privacy Framework Participation and similar clauses.
Compare across platforms →"Amazon Web Services, Inc. participates in the EU-US Data Privacy Framework, the UK Extension to the EU-US Data Privacy Framework, and the Swiss-US Data Privacy Framework.Excerpt from AWS's Privacy Notice
REGULATORY LANDSCAPE: The EU-US Data Privacy Framework was established under GDPR adequacy decision issued by the European Commission.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Participation in the EU-US Data Privacy Framework provides the legal basis for personal data transfers from the EEA, UK, and Switzerland to the United States under GDPR and equivalent frameworks. The operational durability of this mechanism is subject to ongoing legal and political developments, and organizations relying solely on DPF certification for cross-border transfer compliance should maintain contingency planning for …
Under this provision, personal data of EEA, UK, and Swiss users transferred to and processed in the United States is governed by the EU-US Data Privacy Framework. Users in these jurisdictions retain rights under GDPR and equivalent frameworks, including the ability to lodge complaints with their local supervisory authority.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by AWS.