Dun & Bradstreet · D&B Terms of Use · View original document ↗

Cross-Border Personal Data Transfer Consent

Medium severity Medium confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Dun & Bradstreet Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

By submitting any personal information on D&B's website, you are consenting to that information being transferred to other countries for processing as part of D&B's normal business operations.

This analysis describes what Dun & Bradstreet's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

For EU and UK users, international data transfers are subject to strict legal requirements under GDPR, and a general website consent embedded in terms of use may not constitute a sufficient legal basis for such transfers under applicable law.

Interpretive note: Whether this consent mechanism satisfies GDPR Chapter V transfer requirements depends on supervisory authority interpretation and whether D&B relies on additional safeguards documented in its Privacy Policy; the document does not specify those safeguards.

Consumer impact (what this means for users)

Personal information you provide on D&B's site may be transferred internationally, and by using the site you are treated as having consented to this; EU and UK residents in particular should be aware that their data protection rights may provide additional protections beyond what these terms describe.

How other platforms handle this

Replicate Medium

By accessing or using the Services, you represent and warrant that: (a) you are at least 18 years of age or over the age of majority in the jurisdiction where you are a resident or citizen; and (b) your registration and your use of the Service is in compliance with any and all applicable laws and re...

Activision Medium

YOU MUST BE AND HEREBY AFFIRM THAT YOU ARE AN ADULT OF THE LEGAL AGE OF MAJORITY IN YOUR COUNTRY OR STATE OF RESIDENCE. If you are under the legal age of majority, your parent or legal guardian must consent to this agreement.

DraftKings Medium

We rely upon you to obtain any consents from your friends and contacts that may be required by law to allow us to access, upload, and use their personal information for this purpose. You or your friends or contacts may reach us at privacy@draftkings.com to request the removal of this information fro...

See all platforms with this clause type →

Monitoring

Dun & Bradstreet has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
You acknowledge and agree that by providing Dun & Bradstreet with any personal or proprietary information through the Dun & Bradstreet Site, you consent to the lawful transmission of such personal or proprietary information over international borders as necessary for processing in accordance with Dun & Bradstreet's standard business practices and the Dun & Bradstreet Privacy Policy.

— Excerpt from Dun & Bradstreet's D&B Terms of Use

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: This provision directly engages GDPR Chapter V (Articles 44-49), which restricts international transfers of personal data from the EU/EEA to third countries absent an adequacy decision, appropriate safeguards such as Standard Contractual Clauses, or a valid derogation. Consent under GDPR Article 49(1)(a) as a transfer derogation is subject to strict conditions including that it be freely given, specific, informed, and unambiguous; embedding transfer consent in website terms of use may not satisfy these requirements under guidance from the European Data Protection Board. The UK GDPR imposes equivalent restrictions through the UK International Data Transfer Agreement framework, and the ICO is the relevant enforcement authority for UK transfers. GOVERNANCE EXPOSURE: High for EU and UK operations. The consent mechanism used here, which is a general acknowledgment embedded in terms of use, is likely insufficient as a standalone GDPR transfer mechanism under current supervisory authority guidance. D&B would need to demonstrate reliance on an appropriate safeguard such as Standard Contractual Clauses or Binding Corporate Rules for routine processing, with consent serving only as a supplementary or fallback basis in limited circumstances. JURISDICTION FLAGS: EU and EEA users face the highest exposure, as GDPR Chapter V transfer restrictions apply. UK users are subject to equivalent requirements under UK GDPR. California residents may have rights under CCPA regarding the sharing of personal information with entities in other jurisdictions, though CCPA does not impose transfer-specific restrictions comparable to GDPR. CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers operating in the EU or UK should assess whether their use of D&B's website, separate from formal product agreements, triggers independent data transfer obligations that require documentation of appropriate safeguards. Data processing agreements or transfer impact assessments may be required for B2B relationships where employee personal data is involved. COMPLIANCE CONSIDERATIONS: Legal teams should evaluate whether D&B's Privacy Policy, referenced in this clause, provides the additional safeguard documentation required under GDPR and UK GDPR for international transfers, and whether the website consent mechanism should be supplemented by a more specific transfer disclosure or mechanism at the point of data collection.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has authority over data broker practices and may assess whether the consent mechanism for international data transfers meets consumer protection standards
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
D&B Terms of Use
Entity
Dun & Bradstreet
Document last updated
May 5, 2026
Tracking information
First tracked
May 7, 2026
Last verified
May 10, 2026
Record ID
CA-P-008408
Document ID
CA-D-00721
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
abc8db70fa24c9ad38a827e89bfea22df9377d77e7dec7fde906b2f3fef72549
Analysis generated
May 7, 2026 19:09 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Dun & Bradstreet
Document: D&B Terms of Use
Record ID: CA-P-008408
Captured: 2026-05-07 19:09:58 UTC
SHA-256: abc8db70fa24c9ad…
URL: https://conductatlas.com/platform/dun-bradstreet/db-terms-of-use/cross-border-personal-data-transfer-consent/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Dun & Bradstreet's Cross-Border Personal Data Transfer Consent clause do?

For EU and UK users, international data transfers are subject to strict legal requirements under GDPR, and a general website consent embedded in terms of use may not constitute a sufficient legal basis for such transfers under applicable law.

How does this clause affect you?

Personal information you provide on D&B's site may be transferred internationally, and by using the site you are treated as having consented to this; EU and UK residents in particular should be aware that their data protection rights may provide additional protections beyond what these terms describe.

Is ConductAtlas affiliated with Dun & Bradstreet?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Dun & Bradstreet.