If you are in the EU, UK, or Switzerland, your personal data may be sent to and processed in the United States, where data protection rules differ from those in your home country, with Standard Contractual Clauses used as the legal transfer mechanism.
This analysis describes what Monday.com's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Transferring personal data out of the EEA to the United States means your data is subject to US law, including potential government access requests, and the adequacy of the transfer mechanism may be subject to legal challenge.
EU, UK, and Swiss users' personal data is transferred to the United States under Standard Contractual Clauses, meaning the data leaves the jurisdiction where it receives the strongest legal protections, and users should be aware of ongoing legal uncertainty around such transfers.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"If you are located in the European Economic Area, the United Kingdom, or Switzerland, please be aware that your personal data may be transferred to and processed in countries outside of these regions, including the United States, which may not have data protection laws that are as comprehensive as those in your home country. We rely on Standard Contractual Clauses and adequacy decisions as the legal mechanisms to transfer your personal data to such countries.Excerpt from Monday.com's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision directly engages GDPR Chapter V (transfers of personal data to third countries), the UK GDPR equivalent transfer restrictions, and the Swiss Federal Act on Data Protection.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Transferring personal data out of the EEA to the United States means your data is subject to US law, including potential government access requests, and the adequacy of the transfer mechanism may be subject to legal challenge.
EU, UK, and Swiss users' personal data is transferred to the United States under Standard Contractual Clauses, meaning the data leaves the jurisdiction where it receives the strongest legal protections, and users should be aware of ongoing legal uncertainty around such transfers.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Monday.com.