Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Under the Data Privacy Framework, EU, UK, and Swiss individuals whose privacy concerns cannot be resolved by McDonald's or JAMS may invoke binding arbitration as a final recourse mechanism, at no charge to the individual, subject to specified conditions.
This analysis describes what McDonald's's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a tiered dispute resolution mechanism for DPF-covered personal data disputes: direct contact with McDonald's, then JAMS mediation at no cost, and finally binding arbitration, with the FTC retaining investigatory and enforcement authority over McDonald's DPF compliance.
Under this clause, EU, UK, and Swiss individuals with unresolved DPF-related privacy complaints may escalate to JAMS for free dispute resolution and, if unresolved, may invoke binding arbitration under specified conditions. The document states that all other disputes with McDonald's must be resolved under the terms and conditions of the applicable website, app, or digital property.
Cross-platform context
See how other platforms handle Data Privacy Framework Binding Arbitration and similar clauses.
Compare across platforms →Monitoring
McDonald's has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If McDonald's Global is unable to resolve your concern regarding your personal information received by McDonald's Global under the DPF, you have the right to direct your unresolved concern to JAMS, an independent dispute resolution service based in the United States, to provide recourse at no charge to you. To seek recourse for an unresolved concern, visit JAMS' DPF Dispute Resolution page. If JAMS is unable to resolve your concern, you may have the right to invoke binding arbitration under certain conditions.Excerpt from McDonald's's Privacy Policy
1. REGULATORY LANDSCAPE: This provision reflects the DPF's required recourse mechanism under the EU-U.S. Data Privacy Framework Principles, which mandate access to independent recourse for EU individuals. The FTC is the designated enforcement authority for McDonald's DPF participation. Binding arbitration under the DPF is governed by the DPF Annex I arbitration procedures and is separate from any arbitration clauses in McDonald's consumer-facing terms of service. 2. GOVERNANCE EXPOSURE: Low for DPF-specific disputes given the structured recourse mechanism. Medium for the broader statement that all other disputes must be resolved under applicable digital property terms, which may include separate arbitration clauses not addressed in this Privacy Statement. 3. JURISDICTION FLAGS: This mechanism applies only to EU, UK, and Swiss individuals whose data was received by McDonald's Corporation or McDonald's Global Markets LLC under the DPF. It does not apply to data processed by other McDonald's entities or franchisees. Individuals in EU member states may also refer complaints to their local data protection authority. 4. CONTRACT AND VENDOR IMPLICATIONS: McDonald's assumes liability under the DPF if agents (vendors acting as processors) process DPF-covered data inconsistently with DPF Principles, unless McDonald's demonstrates it is not responsible for the relevant event. This creates an operational obligation to monitor and contractually bind DPF-covered vendors. 5. COMPLIANCE CONSIDERATIONS: McDonald's should maintain current JAMS DPF enrollment and confirm that the DPF certification on the U.S. Department of Commerce registry remains active and accurate. The liability provision for agent conduct under the DPF should be reflected in data processing agreements with relevant vendors.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes a tiered dispute resolution mechanism for DPF-covered personal data disputes: direct contact with McDonald's, then JAMS mediation at no cost, and finally binding arbitration, with the FTC retaining investigatory and enforcement authority over McDonald's DPF compliance.
Under this clause, EU, UK, and Swiss individuals with unresolved DPF-related privacy complaints may escalate to JAMS for free dispute resolution and, if unresolved, may invoke binding arbitration under specified conditions. The document states that all other disputes with McDonald's must be resolved under the terms and conditions of the applicable website, app, or digital property.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by McDonald's.