EU and UK users have extensive legal rights over their personal data held by DocuSign, and their data is transferred internationally using Standard Contractual Clauses as the legal safeguard.
This analysis describes what DocuSign's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
EU and UK data protection law provides some of the strongest privacy rights globally, and the use of Standard Contractual Clauses for transfers to the US means those rights travel with your data, though the practical enforceability depends on the transfer mechanism's ongoing validity.
This provision consolidates EU/UK data subject rights and cross-border transfer mechanisms in one location with explicit reference to Standard Contractual Clauses, providing critical GDPR/UK GDPR compliance information.
View full change record →If you are in the EU or UK, you can request access to, correction, or deletion of your DocuSign data, and can object to certain processing. Cross-border transfers of your data to the US are governed by Standard Contractual Clauses, which are currently the primary approved mechanism under GDPR.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
Where ZipRecruiter processes your Personal Data in the capacity of a service provider (data processor), and you seek access, or want to correct, amend, or delete your Personal Data...we will provide you with the data controller's contact information, so you can contact them directly.
"If you are located in the European Economic Area (EEA) or United Kingdom, you have certain rights under applicable data protection laws, including the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, and the right to object. Docusign relies on Standard Contractual Clauses as a legal mechanism for transfers of personal data from the EEA and UK to countries that have not received an adequacy decision.Excerpt from DocuSign's Privacy Statement
(1) REGULATORY LANDSCAPE: These provisions are grounded in GDPR Articles 15-22 for data subject rights and Articles 46 and 47 for transfer mechanisms.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
EU and UK data protection law provides some of the strongest privacy rights globally, and the use of Standard Contractual Clauses for transfers to the US means those rights travel with your data, though the practical enforceability depends on the transfer mechanism's ongoing validity.
If you are in the EU or UK, you can request access to, correction, or deletion of your DocuSign data, and can object to certain processing. Cross-border transfers of your data to the US are governed by Standard Contractual Clauses, which are currently the primary approved mechanism under GDPR.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by DocuSign.