Eufy · Eufy Privacy Policy · View original document ↗

Cross-Border Data Transfer to China-Based Parent

High severity Medium confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Eufy Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Your personal data, including video footage and account information, may be transferred to and stored in China, where Eufy's parent company Anker is based.

This analysis describes what Eufy's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Data transfers to China are subject to Chinese data law requirements including the Personal Information Protection Law (PIPL) and potential government access obligations that differ materially from EU GDPR or US privacy frameworks, which may affect what protections apply to your data.

Interpretive note: The policy does not specify which data categories are transferred to China, which remain stored locally, or which specific transfer mechanisms are used for EU and UK users, creating material ambiguity about the scope of international transfers.

Consumer impact (what this means for users)

Video footage, biometric data, and account information collected by Eufy devices may be stored or processed in China, where different legal protections apply and Chinese authorities may have access rights under Chinese national security law.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Contact Eufy's privacy team at privacy@eufylife.com to request information about where your data is stored, what transfer mechanisms are used for international transfers, and to exercise your right to data deletion if you are an EU or UK user.

How other platforms handle this

Airtable Medium

We may transfer to and process your personal information in countries outside of the jurisdiction where you are located for the various purposes described above. When required by law, we will ensure that we rely on an appropriate legal mechanism for the transfer, such as your consent, standard contr...

OpenAI Medium

OpenAI is based in the United States and the information we collect is governed by U.S. law. If you are accessing our services from outside of the United States, please be aware that your information may be transferred to, stored, and processed by us in our facilities in the United States and by tho...

Calm Medium

Where required by law, we provide adequate protection for the transfer of personal data in accordance with applicable law, such as by obtaining your consent, relying on the European Commission's adequacy decisions, or executing Standard Contractual Clauses. Where relevant, you may request a copy of ...

See all platforms with this clause type →

Monitoring

Eufy has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Your personal information may be transferred to, stored, and processed in countries other than your own, including the United States and China, where our parent company Anker Innovations is headquartered. We take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it.

— Excerpt from Eufy's Eufy Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: Cross-border data transfers from the EU/EEA to China are governed by GDPR Chapter V, which requires adequate safeguards such as Standard Contractual Clauses (SCCs) given that China does not have an EU adequacy decision. China's PIPL imposes its own requirements on outbound data transfers, including security assessments for large-scale transfers of personal information. The UK GDPR and International Data Transfer Agreements apply for UK users. The policy's assertion that 'adequate protection' is ensured without specifying the transfer mechanism creates compliance ambiguity for EU and UK users. GOVERNANCE EXPOSURE: High for EU and UK users. The absence of explicit disclosure of the transfer mechanism (SCCs, binding corporate rules, or adequacy decision) used for EU-to-China transfers is a notable gap. Chinese national security laws, including the National Intelligence Law, may require Chinese companies to cooperate with intelligence requests in ways that cannot be contractually prevented, creating a structural tension with GDPR transfer requirements that has been flagged by EU data protection authorities. JURISDICTION FLAGS: EU/EEA and UK users face the highest exposure given GDPR and UK GDPR transfer restrictions. US users should be aware that data stored in China may be subject to Chinese government access that differs from US legal process requirements. The policy does not specify which data categories are transferred internationally versus stored locally. CONTRACT AND VENDOR IMPLICATIONS: Enterprise or government purchasers of Eufy devices should conduct a data residency assessment before deployment, particularly for sensitive environments. Procurement teams should seek clarification on whether local storage options exist and whether data processing agreements can be structured to limit international transfers. COMPLIANCE CONSIDERATIONS: Legal teams should request specific documentation of the transfer mechanisms used for EU and UK data transfers to China, verify whether SCCs have been executed and supplemented with a transfer impact assessment, and assess whether local storage modes available in Eufy devices effectively prevent international transfer or merely cache data locally before syncing.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has authority over deceptive data practices including misrepresentation of data storage locations and protection levels for US consumers.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Eufy Privacy Policy
Entity
Eufy
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 10, 2026
Record ID
CA-P-009528
Document ID
CA-D-00746
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
741aec8bb1f9c0bae6d8954950684bd0e1a0275b1cc994a5efb2c36e8aa3fcea
Analysis generated
May 8, 2026 08:43 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Eufy
Document: Eufy Privacy Policy
Record ID: CA-P-009528
Captured: 2026-05-08 08:43:58 UTC
SHA-256: 741aec8bb1f9c0ba…
URL: https://conductatlas.com/platform/eufy/eufy-privacy-policy/cross-border-data-transfer-to-china-based-parent/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Eufy's Cross-Border Data Transfer to China-Based Parent clause do?

Data transfers to China are subject to Chinese data law requirements including the Personal Information Protection Law (PIPL) and potential government access obligations that differ materially from EU GDPR or US privacy frameworks, which may affect what protections apply to your data.

How does this clause affect you?

Video footage, biometric data, and account information collected by Eufy devices may be stored or processed in China, where different legal protections apply and Chinese authorities may have access rights under Chinese national security law.

Is ConductAtlas affiliated with Eufy?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Eufy.