55 Total
21 High severity
24 Medium severity
10 Low severity

Key Facts

According to what must any transfer of personal data from the EU, Switzerland, or UK to another country be conducted?
Fastly requires that any transfer of personal data from the EU, Switzerland, or UK to another country be conducted according to an adequate mechanism of transfer as required by applicable laws or regulations.
What can individuals whose DPF complaint cannot be resolved through other channels invoke?
Fastly allows individuals whose DPF complaint cannot be resolved through other channels to invoke binding arbitration for residual claims not fully or partially resolved by other redress mechanisms.
When will Fastly delete personal data collected or received from a child under 16?
Fastly will delete personal data collected or received from a child under 16 immediately upon learning of such collection.
What Principles govern over this privacy policy in the event of any conflict between them?
Fastly requires that the EU-U.S. DPF Principles and/or Swiss-U.S. DPF Principles govern over this privacy policy in the event of any conflict between them.
Does Fastly sell personal data to third parties?
Fastly does not sell personal data to third parties.
When does Fastly remain liable under the Frameworks' principles?
Fastly remains liable under the Frameworks' principles if its agent processes personal information in a manner inconsistent with those principles, unless Fastly proves it is not responsible.
Where may Fastly collect, transfer, process, and store personal information?
Fastly may collect from, transfer to, process, and store personal information in the United States and countries other than the country where the user lives.
How will Fastly notify users of material changes to how it treats users' personal data?
Fastly will notify users by e-mail and/or through a notice on http://docs.fastly.com/changes thirty days prior to any material changes to how it treats users' personal data becoming effective.
When will Fastly give users an opportunity to opt out?
Fastly will give users an opportunity to opt out before personal data it controls is disclosed to an independent third party or used for a purpose materially different from those set out in this Privacy Policy.
With whom may Fastly share personal data in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Fastly's assets?
Fastly may share personal data with a potential buyer or successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Fastly's assets.
Stay ahead of the changes
Track Fastly and get the diff the day its terms change.
Summary

Fastly's Privacy Policy explains how Fastly handles your personal information: it does not sell your data, will notify you 30 days before making material changes to how it treats your data, and gives you a chance to opt out before sharing your data with third parties or using it for new purposes. Fastly may store and process your information in the United States and other countries. If you transmit personal data to Fastly's websites, you do so at your own risk, as Fastly cannot guarantee transmission security.

Analysis

Fastly's Privacy Policy establishes the terms under which Fastly collects, processes, stores, and shares personal data, including cross-border transfers to the United States and other countries conducted only through legally required adequate transfer mechanisms. The policy commits Fastly to a data retention ceiling of the business relationship plus seven years (subject to a legitimate business interest exception), an immediate deletion obligation for personal data of children under 16 discovered after collection, and a prohibition on selling personal data to third parties. Users retain an opt-out right before their data is disclosed to independent third parties or used for materially different purposes, and Fastly must provide 30 days' advance notice before material changes to data-treatment practices take effect. Where the EU-U.S. or Swiss-U.S. Data Privacy Framework Principles conflict with the policy, those Principles govern, and Fastly remains liable for agent mishandling of personal data unless it proves it bears no responsibility.

What this means for you

As an individual user, this document means Fastly will not sell your personal data and will keep it no longer than seven years after your business relationship ends, unless Fastly has a legitimate business interest in retaining it longer. Before Fastly discloses your data to an independent third party or uses it for a purpose materially different from what was originally stated, you have the right to opt out — you can act on that right when Fastly presents the opt-out opportunity. You will also receive at least 30 days' notice by email or posted notice before any material change to how Fastly treats your personal data takes effect, giving you a defined window to review those changes.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

Featured, High severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

55 provisions
12 featured
18 clause types
21 high severity
Restricted or Prohibited Content/Industries 1 1 high
AI / Automated Decision-Making 1
Stay ahead of the changes

Monitoring

Fastly has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Adequate mechanism required for EU/UK/Swiss transfers and similar clauses.

Compare across platforms →
Archival ProvenanceSource & Archival Record
Last Captured May 5, 2026 06:36 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000676
Version ID CA-V-001314
SHA-256 3c71a4823fe9dcef89423150ae9436e908ffb74d5c40a1e3f639b91d4d87d224
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans