Provision record
Modal · Modal Terms of Service · View original document ↗

48-Hour Data Breach Notification

High confidence Unique · 0 of 343 platforms
Stay ahead of the changes
Track Modal and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what Modal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Generated by a model from the captured document; not read by a person

This provision establishes a processor-to-controller breach notification timeline of 48 hours, which is shorter than the GDPR's 72-hour controller-to-supervisory-authority window, providing Customer additional time to assess the breach and prepare regulatory notifications. The provision places the obligation to notify data subjects and supervisory authorities on Customer rather than Modal, consistent with the processor-controller relationship.

Cross-platform context

See how other platforms handle 48-Hour Data Breach Notification and similar clauses.

Compare across platforms →
▸ View Original Clause Language DOCUMENT RECORD
"
Processor shall notify Customer without undue delay and in any event within 48 hours after becoming aware of a Personal Data Breach affecting Customer Personal Data, providing Customer with sufficient information to allow the Customer to meet any obligations to report or inform Data Subjects of the Personal Data Breach under the Applicable Privacy Laws.

Excerpt from Modal's Terms of Service

Provision details

Document information
Document
Modal Terms of Service
Entity
Modal
Tracking information
First captured by ConductAtlas
July 11, 2026
Text quoted from version
CA-V-007313, captured Oct. 2, 2026
Record ID
CA-P-074543
Document ID
CA-D-000653
Evidence Provenance
Source URL
Wayback Machine
Archived bytes SHA-256 (version CA-V-007313)
46c9ae7a96ee9d43e97e52620dc318f0d3c1a23dda3f43b4dc096f209c239899
Analysis generated
July 12, 2026 17:44 UTC
Methodology
Evidence
✓ Excerpt found in version CA-V-007313, captured Oct. 2, 2026 (checked Oct. 5, 2026)
Not the current version. The document's current version is CA-V-007545, captured Oct. 15, 2026; this clause has not been re-checked against it.
Citation Record
Entity: Modal
Document: Modal Terms of Service
Record ID: CA-P-074543
Version: CA-V-007313
Captured: 2026-10-02 01:18:01 UTC
SHA-256: 46c9ae7a96ee9d43…
URL: https://conductatlas.com/platform/modal/modal-terms-of-service/provision/CA-P-074543/48-hour-data-breach-notification/
Accessed: Nov. 10, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Categories

Other risks in this policy

Get the weekly coverage letter

Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.

Frequently Asked Questions

What does Modal's 48-Hour Data Breach Notification clause do?

This provision establishes a processor-to-controller breach notification timeline of 48 hours, which is shorter than the GDPR's 72-hour controller-to-supervisory-authority window, providing Customer additional time to assess the breach and prepare regulatory notifications. The provision places the obligation to notify data subjects and supervisory authorities on Customer rather than Modal, consistent with the processor-controller relationship.

Is ConductAtlas affiliated with Modal?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Modal.