This analysis describes what Okta's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
How other platforms handle this
The Federal Trade Commission has jurisdiction over ZipRecruiter's compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.
Discord commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner's Office (ICO) and the Swiss Federal Data Protection and Information Commissioner...
For any complaint that we cannot resolve directly Notion Labs, Inc. commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs)...
"Okta is responsible for the processing of personal data it receives under the DPF and subsequently transfers to a third party acting as an agent on its behalf.Excerpt from Okta's Privacy Policy
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The clause states: “Okta is responsible for the processing of personal data it receives under the DPF and subsequently transfers to a third party acting as an agent on its behalf.”
ConductAtlas has identified this type of provision across 267 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Okta.