Figma certifies compliance with the EU-U.S. DPF, UK Extension, and Swiss-U.S. DPF, providing EU, UK, and Swiss users with an independent dispute resolution pathway through JAMS at no cost, with binding arbitration available as a final escalation mechanism under DPF rules.
This analysis describes what Figma's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a structured complaint resolution pathway for EU, UK, and Swiss users, including a 45-day initial response commitment, free referral to JAMS for unresolved complaints, and access to binding arbitration under DPF conditions, with the FTC holding enforcement jurisdiction over Figma's DPF obligations.
The updated terms now restrict how Figma may use personal information from children. Children may only use the Services through a Figma for Education Enterprise agreement with their school, and Figma explicitly prohibits using children's personal information to train or improve AI services, serve targeted advertisements, or enable third-party tracking. Parents may contact Figma if they learn a child provided personal information without consent outside of an education agreement.
View change record →Under this provision, EU, UK, and Swiss users who have unresolved data privacy complaints have access to JAMS dispute resolution at no charge, and may invoke binding arbitration as a final recourse under DPF framework conditions. The policy states that DPF Principles govern over the privacy policy terms in the event of conflict.
Cross-platform context
See how other platforms handle EU-U.S. Data Privacy Framework and Binding Arbitration Fallback and similar clauses.
Compare across platforms →"Figma, Inc. (for the purposes of this section, "Figma", "we", or "us") complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce... If you have an unresolved DPF complaint that we have not addressed satisfactorily, we have further committed to refer unresolved complaints to JAMS Data Privacy Dispute Resolution Program, an independent dispute resolution provider located in the U.S. made available free of charge. For more information or to submit a complaint please visit: https://www.jamsadr.com/DPF-Dispute-Resolution . Under certain conditions, more fully described on the Data Privacy Framework website, you may be entitled to invoke binding arbitration when other dispute resolution options do not satisfactorily resolve your concerns.Excerpt from Figma's Privacy Policy (Superseded URL)
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes a structured complaint resolution pathway for EU, UK, and Swiss users, including a 45-day initial response commitment, free referral to JAMS for unresolved complaints, and access to binding arbitration under DPF conditions, with the FTC holding enforcement jurisdiction over Figma's DPF obligations.
Under this provision, EU, UK, and Swiss users who have unresolved data privacy complaints have access to JAMS dispute resolution at no charge, and may invoke binding arbitration as a final recourse under DPF framework conditions. The policy states that DPF Principles govern over the privacy policy terms in the event of conflict.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Figma.