Midjourney · Midjourney Privacy Policy · View original document ↗

Business Transfer of Personal Data

Low severity High confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Midjourney recorded 5 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Midjourney Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Midjourney states that your personal data may be transferred to another company as part of a merger, acquisition, bankruptcy, or sale of business assets.

This analysis describes what Midjourney's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This clause establishes the procedural framework under which user personal data may be transferred to a successor entity or acquirer in the event of a material corporate transaction or insolvency event. It clarifies that personal data is treated as a business asset subject to transfer alongside other company assets.

Recent Activity

This document changed recently

High Apr 21, 2026

The updated privacy policy removed language describing how Midjourney shares personal data, the security measures protecting that data, children's privacy safeguards, procedures for notifying users of policy changes, and links to related policies. Users no longer have explicit disclosure of these practices within the privacy policy itself. The removal of language on how policy changes are communicated may mean users have less notice of future privacy modifications than previously stated.

View change record →

Consumer impact (what this means for users)

Personal data collected by Midjourney may be transferred to and processed by an acquiring or successor entity in the event of a merger, acquisition, or asset sale, as stated in the policy; the privacy practices of any successor entity would govern subsequent data processing.

How other platforms handle this

Windsurf Medium

If you are a resident in the EEA, Switzerland or the UK, then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. We may transfer Personal Information from the EEA, Switzerland or the UK to the U.S. and other third countries ...

OpenAI Medium

We may share or transfer personal information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

Roblox Medium

We may share your personal information with third parties in the following circumstances: with service providers who perform services on our behalf; with advertising and analytics partners; with business partners with whom we jointly offer products or services; with other parties with your consent; ...

See all platforms with this clause type →

Monitoring

Midjourney has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Us about our Service users is among the assets transferred.

— Excerpt from Midjourney's Midjourney Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

1) REGULATORY LANDSCAPE: Business transfer of personal data engages GDPR Article 6 lawful basis requirements, CCPA business purpose disclosures, and applicable merger notification or regulatory review processes. In the EU and UK, data subjects may have the right to object to transfer of their data to a successor entity depending on the lawful basis for the original processing. The FTC may also review data transfer provisions in corporate transactions involving significant consumer data assets. 2) GOVERNANCE EXPOSURE: Low to Medium. This is a standard commercial provision, but the breadth of data categories held by Midjourney, including user prompts, uploaded images, and behavioral inferences, means that a business transfer would involve transfer of operationally significant personal data. Due diligence in any transaction should address data protection obligations in the target company. 3) JURISDICTION FLAGS: EEA and UK users have stronger procedural protections in business transfer scenarios under GDPR, including potential notification obligations and objection rights. California users should be aware that CCPA rights may persist against successor entities depending on jurisdiction-specific application. 4) CONTRACT AND VENDOR IMPLICATIONS: In any M&A context, acquirers should conduct data protection due diligence on Midjourney's data assets, processing activities, consent records, and outstanding data subject requests. The presence of ML training data in the asset base creates specific diligence considerations around data provenance and consent. 5) COMPLIANCE CONSIDERATIONS: In the event of a planned business transfer, Midjourney's legal team should assess notification obligations to data subjects under GDPR and applicable state laws, evaluate whether successor entity data processing agreements need to be updated, and confirm that consent records accompany the transferred data.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC reviews corporate transactions involving significant consumer data assets and may evaluate whether business transfer data provisions are consistent with consumer protection standards.
    File a complaint →

Applicable regulations

BIPA
Illinois, USA
CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Midjourney Privacy Policy
Entity
Midjourney
Document last updated
May 5, 2026
Tracking information
First tracked
May 12, 2026
Last verified
May 12, 2026
Record ID
CA-P-005414
Document ID
CA-D-00094
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
4f973ca215c40ca11dfb698adf7f5dbf2114ba1559811ad1a732eca9efa6c06f
Analysis generated
May 12, 2026 04:55 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Midjourney
Document: Midjourney Privacy Policy
Record ID: CA-P-005414
Captured: 2026-05-12 04:55:54 UTC
SHA-256: 4f973ca215c40ca1…
URL: https://conductatlas.com/platform/midjourney/midjourney-privacy-policy/business-transfer-of-personal-data/
Accessed: May 20, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Low
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Midjourney's Business Transfer of Personal Data clause do?

This clause establishes the procedural framework under which user personal data may be transferred to a successor entity or acquirer in the event of a material corporate transaction or insolvency event. It clarifies that personal data is treated as a business asset subject to transfer alongside other company assets.

How does this clause affect you?

Personal data collected by Midjourney may be transferred to and processed by an acquiring or successor entity in the event of a merger, acquisition, or asset sale, as stated in the policy; the privacy practices of any successor entity would govern subsequent data processing.

Is ConductAtlas affiliated with Midjourney?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Midjourney.