Canva, headquartered in Australia, transfers personal data from EU, UK, and Swiss users to other countries that may not have equivalent privacy protections, relying primarily on Standard Contractual Clauses approved by the European Commission to justify these transfers.
This analysis describes what Canva's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the procedural framework governing cross-border data transfers under GDPR and equivalent data protection regimes. The use of standard contractual clauses creates a documented legal mechanism intended to maintain data protection standards during international transfers, which is operationally significant for regulatory compliance and data subject protections.
If you are an EU, UK, or Swiss user, your personal data is transferred to Canva's servers and service providers outside your jurisdiction, including to Australia and potentially the United States, under Standard Contractual Clauses that are contractual rather than regulatory guarantees. The practical enforceability of these protections from a consumer perspective depends on Canva's compliance with the clause obligations and the availability of remedies in the destination country.
How other platforms handle this
Whenever we transfer personal data internationally, we use tools and transfer agreements to: make sure the data transfer complies with applicable law; and help to give your data the same level of protection as it has in the EU...
we also transfer personal information to all other countries in which Adobe or its affiliates, providers, and partners operate. We carry out these transfers in compliance with applicable laws – for example, by putting data transfer agreements in place...
we may share data between our affiliates for the safety and security of our users and may take necessary actions if we believe you have violated these Terms, including banning you from our Services and/or our affiliates' services...
"We transfer personal information from the EEA, the UK, and Switzerland to other countries, some of which have not been determined by the European Commission to have an adequate level of data protection. When we do, we use a variety of legal mechanisms, including contracts, such as the standard contractual clauses published by the European Commission, to help ensure your rights and protections travel with your data.Excerpt from Canva's Privacy Policy
REGULATORY LANDSCAPE: This provision directly engages GDPR Chapter V (restrictions on international data transfers), which requires either an adequacy decision, appropriate safeguards such as Standard Contractual Clauses, or derogations.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the procedural framework governing cross-border data transfers under GDPR and equivalent data protection regimes. The use of standard contractual clauses creates a documented legal mechanism intended to maintain data protection standards during international transfers, which is operationally significant for regulatory compliance and data subject protections.
If you are an EU, UK, or Swiss user, your personal data is transferred to Canva's servers and service providers outside your jurisdiction, including to Australia and potentially the United States, under Standard Contractual Clauses that are contractual rather than regulatory guarantees. The practical enforceability of these protections from a consumer perspective depends on Canva's compliance with the clause obligations …
ConductAtlas has identified this type of provision across 288 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Canva.