Which regulatory agencies enforce this type of clause?

{'agency': 'State_AG', 'reason': 'State Attorneys General enforce state privacy laws including CCPA/CPRA for California residents affected by cross-border data transfers.', 'complaint_url': 'https://www.naag.org/find-my-ag/'}

What is the severity of this clause?

ConductAtlas classifies this Cross-Border Data Transfers clause as high severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

Do other platforms have similar clauses?

Yes. ConductAtlas has identified similar Cross-Border Data Transfers clauses across approximately 55 other tracked platforms. You can compare how platforms differ on this clause type in the cross-platform comparison view.

Cross-Border Data Transfers — Cohere

Share 𝕏 Share in Share 🔒 PDF

What it is

Cohere may move your personal data to other countries, including ones with weaker privacy laws than your home country.

Consumer impact (what this means for users)

Your personal data, including information about your AI interactions, may be processed in countries with lower data protection standards, which could limit your ability to enforce your privacy rights.

Cross-platform context

See how other platforms handle Cross-Border Data Transfers and similar clauses.

Compare across platforms →

Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

If you are based in the EU, UK, or Canada, your personal data may be transferred to countries without equivalent legal protections, potentially reducing your privacy rights.

View original clause language

Your personal information may be transferred to and processed in countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country.

Institutional analysis (Compliance & legal intelligence)

(1) REGULATORY FRAMEWORK: GDPR Chapter V (Arts. 44-49) strictly regulates transfers of personal data to third countries, requiring adequacy decisions, SCCs, BCRs, or other approved mechanisms. UK GDPR imposes equivalent transfer restrictions enforced by the ICO. PIPEDA requires comparable protection for data transferred internationally (OPC guidance). The EU-US Data Privacy Framework (2023) provides a transfer mechanism for US-based recipients, but its long-term validity remains subject to legal challenge. (2)

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

State AG

State Attorneys General enforce state privacy laws including CCPA/CPRA for California residents affected by cross-border data transfers.
File a complaint →

Provision details

Document information

Document

Cohere Privacy Policy

Entity

Cohere

Document last updated

April 29, 2026

Tracking information

First tracked

April 30, 2026

Last verified

April 30, 2026

Record ID

CA-P-004376

Document ID

CA-D-00440

Evidence Provenance

Source URL

https://cohere.com/privacy

Wayback Machine

View archived versions →

SHA-256

b2e9f1f2a03da87b73e4a7e20ef221985d0c11e83740f590a5491a11338b7f5f

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: Cohere | Document: Cohere Privacy Policy | Record: CA-P-004376
Captured: 2026-04-30 09:10:31 UTC | SHA-256: b2e9f1f2a03da87b…
URL: https://conductatlas.com/platform/cohere/cohere-privacy-policy/cross-border-data-transfers/
Accessed: May 2, 2026

Classification

Severity

High

Cross-Border Data Transfers