Users consent to Medium processing, transferring, and storing their personal information in the United States and other countries, which may not provide equivalent data protection rights to those available under the user's local law.
This analysis describes what Medium's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes international transfer and storage of user data without specifying the transfer mechanisms or safeguards in place, and expressly acknowledges that users may have fewer protections in destination countries than under their local law. The adequacy of this disclosure for GDPR compliance purposes may require evaluation under applicable regulatory guidance.
Interpretive note: The provision does not specify transfer mechanisms, recipient countries, or safeguards; GDPR compliance implications depend on what is disclosed in the separately referenced Privacy Policy and the transfer mechanisms Medium relies upon.
The updated terms establish that Medium may stop providing the Services or any of its features within its sole discretion. The prior language focused on subscription account sign-up mechanics; the new provision creates an explicit contractual reservation allowing Medium to discontinue platform features or the entire service without conditions tied to a specific event or timeline. The terms do not specify advance notice requirements, transition periods, or user remedies if the service is discontinued.
View change record →The updated terms expand a data collection warranty to apply to all personal information users provide to Medium, not limited to newsletter editor submissions. Users now represent and warrant that any personal information they submit has been lawfully collected and that all required notices and consents were obtained before collection. This means the warranty applies whether data is provided through newsletters, account profiles, submissions, or other Medium features. If a user provides personal information collected without proper notice or consent, they may be in breach of this representation.
View change record →This new provision explicitly authorizes international data transfers with reduced protections, particularly relevant for GDPR compliance and non-US users' data privacy rights.
View full change record →This clause authorizes Medium to process, transfer, and store user information in the US and other countries. The agreement acknowledges that data protection rights may differ in destination countries compared to a user's home jurisdiction.
Cross-platform context
See how other platforms handle International Data Transfer Authorization and similar clauses.
Compare across platforms →"In order for us to provide our Services, you agree that we may process, transfer and store information about you in the US and other countries, where you may not have the same rights and protections as you do under local law.Excerpt from Medium's Terms of Service
1) REGULATORY LANDSCAPE: This provision directly engages GDPR Chapter V, which requires that transfers of personal data to third countries be based on adequacy decisions, standard contractual clauses, binding corporate rules, or other approved transfer …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision authorizes international transfer and storage of user data without specifying the transfer mechanisms or safeguards in place, and expressly acknowledges that users may have fewer protections in destination countries than under their local law. The adequacy of this disclosure for GDPR compliance purposes may require evaluation under applicable regulatory guidance.
This clause authorizes Medium to process, transfer, and store user information in the US and other countries. The agreement acknowledges that data protection rights may differ in destination countries compared to a user's home jurisdiction.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Medium.