When Fastly processes personal data as a data processor on behalf of its Customers, data subjects seeking to exercise access, correction, or deletion rights must direct requests to the Customer acting as data controller, not to Fastly directly.
This analysis describes what Fastly's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision clarifies that Fastly's direct data subject rights obligations apply only to data Fastly controls as a data controller; for data processed on behalf of Customers, the contractual and legal relationship for data subject rights runs through the Customer as data controller.
Under this clause, individuals whose personal data is processed by Fastly as part of a Customer's service infrastructure must submit data access, correction, or deletion requests to that Customer rather than to Fastly directly. Fastly commits to forwarding any misdirected data subject requests to the applicable Customer.
Cross-platform context
See how other platforms handle Data Subject Rights and Fastly as Data Processor and similar clauses.
Compare across platforms →"Fastly has no direct relationship with the data subjects whose personal data we process on behalf of our Customers. An individual who seeks to access, correct, amend, or delete personal data about them that we process on behalf of our Customers should direct their requests or queries to our Customer (i.e., the data controller). In addition, we will forward to the applicable Customer any request by a data subject received by Fastly regarding personal data processed on behalf of that Customer.Excerpt from Fastly's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision clarifies that Fastly's direct data subject rights obligations apply only to data Fastly controls as a data controller; for data processed on behalf of Customers, the contractual and legal relationship for data subject rights runs through the Customer as data controller.
Under this clause, individuals whose personal data is processed by Fastly as part of a Customer's service infrastructure must submit data access, correction, or deletion requests to that Customer rather than to Fastly directly. Fastly commits to forwarding any misdirected data subject requests to the applicable Customer.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Fastly.