Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The statement authorizes international transfers of Personal Information to the U.S. and other jurisdictions, relying on website use as a consent signal where applicable law permits this mechanism.
This analysis describes what Glean's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Reliance on implicit consent through website use as a transfer mechanism for international data flows may require evaluation under GDPR and LGPD, which impose specific requirements on consent validity and adequacy for cross-border transfers.
Interpretive note: The validity of implicit consent through website use as an international transfer mechanism varies by jurisdiction; GDPR Article 49 requirements for derogations may limit the enforceability of this approach for EEA users.
Under this clause, using Glean's websites is treated as consent to international data transfers where applicable law permits this mechanism; EEA and UK users should note that Standard Contractual Clauses and DPF certification are identified as the primary transfer mechanisms, with implicit consent as a secondary basis.
Cross-platform context
See how other platforms handle International Data Transfers and Consent Mechanism and similar clauses.
Compare across platforms →Monitoring
Glean has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Glean is a global organization. Your Personal Information may be transferred to, and processed in, the United States or other jurisdictions where data protection laws may differ from those in your country of residence. By using our websites, where applicable law permits, you consent to such transfers.Excerpt from Glean's Privacy Policy
1) REGULATORY LANDSCAPE: This provision implicates GDPR Chapter V (international transfers), LGPD Chapter VIII (international data transfers), and equivalent frameworks. GDPR's adequacy requirements and Standard Contractual Clauses framework, along with DPF certification, are referenced separately as primary transfer mechanisms; the implicit consent provision operates as a residual basis whose validity under GDPR Article 49 requires case-by-case assessment. 2) GOVERNANCE EXPOSURE: Medium. Reliance on website use as implicit consent for international transfers is a legally contested mechanism under GDPR, where consent must be freely given, specific, informed, and unambiguous. The statement's qualifier 'where applicable law permits' acknowledges this limitation but does not resolve the potential tension. 3) JURISDICTION FLAGS: EEA and UK users present the highest exposure given GDPR's prescriptive transfer adequacy requirements. Brazilian users are covered by LGPD's international transfer provisions. Non-EEA, non-California, and non-Brazil users may have fewer statutory protections and may be more directly affected by this consent mechanism. 4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers in the EU and UK should confirm that their data processing agreements with Glean designate Standard Contractual Clauses as the operative transfer mechanism rather than relying on implicit consent. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether the implicit consent transfer mechanism is adequately disclosed at the point of data collection and whether it satisfies applicable legal standards in all jurisdictions where Glean's websites are accessed.
Reliance on implicit consent through website use as a transfer mechanism for international data flows may require evaluation under GDPR and LGPD, which impose specific requirements on consent validity and adequacy for cross-border transfers.
Under this clause, using Glean's websites is treated as consent to international data transfers where applicable law permits this mechanism; EEA and UK users should note that Standard Contractual Clauses and DPF certification are identified as the primary transfer mechanisms, with implicit consent as a secondary basis.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Glean.