The document references a mechanism by which customers can receive advance notification of changes to the subprocessor list, enabling controllers to exercise their right to object to new subprocessors before those processors begin processing customer data.
This analysis describes what Datadog's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision addresses the GDPR Article 28(2) requirement that processors give controllers the opportunity to object to subprocessor changes, and establishes the operational mechanism through which that right is exercised under Datadog's terms.
Interpretive note: The specific notice period and objection procedure are referenced by convention but could not be confirmed from the extracted HTML; the DPA governing the customer relationship controls the operative terms.
This provision establishes that business customers can subscribe to notifications of subprocessor additions or removals, and that the notification is intended to provide sufficient advance notice for customers to evaluate and, if applicable, object to new subprocessors before processing begins.
Cross-platform context
See how other platforms handle Subprocessor Change Notification Mechanism and similar clauses.
Compare across platforms →Monitoring
Datadog has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
1) REGULATORY LANDSCAPE: GDPR Article 28(2) requires that processors inform controllers of intended changes to subprocessors and provide the controller with the opportunity to object. The notification mechanism described in this document is the operational implementation of this requirement. Relevant enforcement authorities are EU national supervisory authorities. 2) GOVERNANCE EXPOSURE: Medium. The adequacy of the notice period is a material compliance question. If the notice period is insufficient for a controller to meaningfully evaluate a new subprocessor and exercise an objection right, this may not fully satisfy Article 28(2). Controllers should verify the notice period specified in their DPA with Datadog. 3) JURISDICTION FLAGS: EU/EEA and UK customers have the clearest regulatory basis for relying on this mechanism. The enforceability of the objection right depends on the specific contractual language in the applicable DPA. 4) CONTRACT AND VENDOR IMPLICATIONS: Procurement teams should confirm that the DPA with Datadog specifies the notice period for subprocessor changes and the procedure for exercising an objection. Where no meaningful remedy (such as contract termination) is available upon objection, the practical value of the notification right may be limited. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should operationalize the subscription to subprocessor change notifications and establish an internal review process for evaluating new subprocessors within the notice period. Records of notifications received and responses should be maintained.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 3 platforms + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision addresses the GDPR Article 28(2) requirement that processors give controllers the opportunity to object to subprocessor changes, and establishes the operational mechanism through which that right is exercised under Datadog's terms.
This provision establishes that business customers can subscribe to notifications of subprocessor additions or removals, and that the notification is intended to provide sufficient advance notice for customers to evaluate and, if applicable, object to new subprocessors before processing begins.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Datadog.