Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that LlamaIndex has appointed Prighter Group as its EU privacy representative and designated it as the point of contact for data subjects in the EU to exercise rights including access and erasure requests.
This analysis describes what LlamaIndex's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Appointment of an EU representative under GDPR Article 27 is required for controllers established outside the EU that offer goods or services to EU data subjects or monitor their behavior. This provision establishes the operational mechanism for EU data subject rights requests.
Under this clause, EU users who wish to submit GDPR data subject rights requests including access, rectification, erasure, or portability requests may do so through the Prighter Group portal at https://app.prighter.com/portal/17945636398.
Cross-platform context
See how other platforms handle EU Privacy Representative (Prighter Group) and similar clauses.
Compare across platforms →Monitoring
LlamaIndex has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions: European Union (EU) Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/17945636398Excerpt from LlamaIndex's Privacy Policy
1) REGULATORY LANDSCAPE: GDPR Article 27 requires controllers and processors not established in the EU to appoint an EU representative when processing personal data of EU data subjects in the context of offering goods or services or monitoring their behavior. The appointment of Prighter Group indicates LlamaIndex's position that it is subject to GDPR's extraterritorial scope. EU supervisory authorities, including lead DPAs under the one-stop-shop mechanism if applicable, are the relevant enforcement authorities. 2) GOVERNANCE EXPOSURE: Low to medium. The appointment of an EU representative is a compliance-positive step; however, the policy does not specify which EU member state serves as LlamaIndex's primary establishment or which lead supervisory authority would have jurisdiction, which may be relevant if LlamaIndex processes EU personal data at scale. 3) JURISDICTION FLAGS: All EU and EEA member states are covered through the Prighter representative appointment. UK GDPR may require a separate UK representative appointment, which is not addressed in this notice. 4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers in the EU who engage LlamaIndex as a processor should confirm that a GDPR-compliant DPA is in place with LlamaIndex, as the representative appointment addresses controller-mode obligations and does not substitute for a DPA governing processor activities. 5) COMPLIANCE CONSIDERATIONS: Legal teams should confirm whether Prighter Group's representative mandate is documented in a written agreement as required by GDPR, and whether the Prighter portal adequately handles all GDPR data subject rights categories including restriction of processing and objection rights in addition to access and erasure.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Appointment of an EU representative under GDPR Article 27 is required for controllers established outside the EU that offer goods or services to EU data subjects or monitor their behavior. This provision establishes the operational mechanism for EU data subject rights requests.
Under this clause, EU users who wish to submit GDPR data subject rights requests including access, rectification, erasure, or portability requests may do so through the Prighter Group portal at https://app.prighter.com/portal/17945636398.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by LlamaIndex.