If you live in the EU or EEA, you have legal rights to see, correct, delete, or move your personal data, and to object to certain types of processing.
This analysis describes what Medium's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These rights are legally enforceable under GDPR and give EU users meaningful control over their personal data held by Medium, including the ability to request full deletion of their account data.
The updated policy states that Medium and its vendors may scan, analyze, and review your content, messages, AI interactions, and associated metadata. Data sharing now explicitly includes information you submitted or posted through the service, extending beyond infrastructure support to machine learning model training and improvement. The policy does not indicate an opt-out mechanism or granular user control over this specific use of content.
View change record →EU and EEA users can formally request access to, correction of, or deletion of their personal data held by Medium, and can object to data processing used for advertising or profiling purposes.
How other platforms handle this
You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
By providing your mobile phone number, you consent to receive automated text (SMS) messages from Instacart...To opt out, reply STOP. For help, reply HELP or contact us directly...
"If you are located in the European Union or European Economic Area, you have certain rights under applicable law, including the right to access, rectify, erase, or restrict the processing of your personal data, the right to data portability, and the right to object to the processing of your personal data.Excerpt from Medium's Privacy Policy
REGULATORY LANDSCAPE: This provision reflects GDPR Articles 15 through 22, covering rights of access, rectification, erasure, restriction, portability, and objection.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
These rights are legally enforceable under GDPR and give EU users meaningful control over their personal data held by Medium, including the ability to request full deletion of their account data.
EU and EEA users can formally request access to, correction of, or deletion of their personal data held by Medium, and can object to data processing used for advertising or profiling purposes.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Medium.