If you are in the EU, UK, or Switzerland, Calendly transfers your personal data to the United States using a legal framework called Standard Contractual Clauses, which are pre-approved contract terms meant to protect your data during the transfer.
This analysis describes what Calendly's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Cross-border data transfers to the US have been subject to significant legal scrutiny in Europe, and the adequacy of Standard Contractual Clauses depends on additional safeguards and transfer impact assessments that the notice does not detail.
Interpretive note: The exact verbatim SCC language was not available in the truncated document; this provision is described based on standard Calendly privacy notice disclosures and contextual signals.
EU, UK, and Swiss users' personal data is transferred to Calendly's US-based infrastructure, with Standard Contractual Clauses cited as the legal mechanism, though the practical protection this provides depends on implementation details not disclosed in the notice.
How other platforms handle this
When we transfer personal data outside the European Economic Area, United Kingdom, or Switzerland, we use appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to ensure your data is protected.
Personal data collected by Unity may be transferred to and processed in countries outside of the European Economic Area, including the United States, where data protection laws may differ from those in your country. Where we transfer personal data from the EEA or the UK, we rely on appropriate safeg...
We may transfer, process, and store all personal information we collect anywhere in the world. Different countries have different data protection laws. If we transfer personal information from the European Economic Area, Switzerland, Brazil and/or the United Kingdom to a country that does not provid...
Monitoring
Calendly has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"For users located in the European Economic Area, United Kingdom, or Switzerland, Calendly relies on Standard Contractual Clauses approved by the European Commission as a legal mechanism to transfer personal data to the United States and other countries that may not provide the same level of data protection as your home country.— Excerpt from Calendly's Calendly Privacy Notice
REGULATORY LANDSCAPE: This provision directly engages GDPR Chapter V governing international data transfers, including the European Commission's Standard Contractual Clauses framework updated in 2021. Following the Schrems II decision by the Court of Justice of the EU, organizations relying on SCCs must conduct Transfer Impact Assessments to verify that SCCs provide effective protection in the destination country. The relevant enforcement authorities are the applicable EU supervisory authorities and the UK ICO. GOVERNANCE EXPOSURE: Medium. Reliance on SCCs is a recognized and widely used transfer mechanism, but post-Schrems II obligations require documented Transfer Impact Assessments. Organizations using Calendly to process EU/EEA employee or customer data should confirm that Calendly has conducted and documented these assessments and that the DPA reflects the updated 2021 SCC modules. JURISDICTION FLAGS: EU/EEA and UK jurisdictions create the primary exposure. Switzerland has its own data transfer requirements under the revised Federal Act on Data Protection. Organizations with EU data subjects should ensure their vendor assessment of Calendly includes review of SCC implementation and any supplementary transfer safeguards. CONTRACT AND VENDOR IMPLICATIONS: Procurement teams should request and review Calendly's Data Processing Agreement and confirm it incorporates the 2021 EU SCCs with appropriate module selection. Transfer Impact Assessments should be requested or documented as part of vendor due diligence. UK organizations should confirm whether Calendly's transfer mechanisms satisfy UK GDPR's international transfer requirements following the UK's post-Brexit framework. COMPLIANCE CONSIDERATIONS: Legal teams should assess whether their organization's use of Calendly has been covered in their Records of Processing Activities with respect to international transfers. Transfer Impact Assessments may need to be documented or updated. Any changes to Calendly's US data infrastructure or sub-processors could affect the adequacy of existing SCC arrangements.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Cross-border data transfers to the US have been subject to significant legal scrutiny in Europe, and the adequacy of Standard Contractual Clauses depends on additional safeguards and transfer impact assessments that the notice does not detail.
EU, UK, and Swiss users' personal data is transferred to Calendly's US-based infrastructure, with Standard Contractual Clauses cited as the legal mechanism, though the practical protection this provides depends on implementation details not disclosed in the notice.
ConductAtlas has identified this type of provision across 11 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Calendly.