If your employer or another company uses Databricks to process your data, Databricks is not responsible under this privacy policy — the company that hired Databricks is. You need to contact that company, not Databricks, about your data rights.
If your personal data is processed within a Databricks customer's platform environment, this privacy notice does not apply to you — you must contact the enterprise customer directly, which may be your employer or a third-party service provider, to exercise rights like deletion or access.
Cross-platform context
See how other platforms handle Controller vs. Processor Distinction for Platform Data and similar clauses.
Compare across platforms →This clause can leave individuals without a clear path to exercise their privacy rights if their data is processed through an enterprise customer's Databricks environment, creating a potential accountability gap.
REGULATORY FRAMEWORK: This provision implicates GDPR Art. 28 (processor obligations), Art. 4(7)/(8) (controller/processor definitions), Art. 26 (joint controllers), and CCPA §1798.140(ag) (service provider definition). Under GDPR, this clause places responsibility on the data controller (Databricks' enterprise customer) to fulfill data subject rights, but Databricks as processor must contractually assist per Art. 28(3)(e). The Irish DPC and CPPA both have enforcement authority over failures in this structure.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.