Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The DPA requires Perplexity to assist Customer with data subject rights requests and, to the extent required by Privacy Laws, with data protection impact assessments and prior consultation with competent authorities.
This analysis describes what Perplexity AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes Perplexity's obligation to support Customer's DPIA and supervisory authority consultation obligations under GDPR Articles 35 and 36, conditioning that support on the extent required by applicable Privacy Laws.
This addition clarifies Perplexity's affirmative duties to assist customers in exercising data subject rights and conducting impact assessments required under privacy laws, reducing customer compliance burden.
View full change record →The agreement requires Perplexity to assist with data subject rights requests and, where required by Privacy Laws, with conducting DPIAs and prior regulatory consultation, supporting Customer's compliance obligations under GDPR and equivalent laws.
Cross-platform context
See how other platforms handle Data Protection Impact Assessment and Supervisory Authority Consultation Assistance and similar clauses.
Compare across platforms →Monitoring
Perplexity AI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Perplexity shall, in relation to the processing of Personal Data and to enable Customer to comply with its obligations which arise as a result thereof, provide assistance to Customer by: notifying Customer of requests from individuals pursuant to their rights under Privacy Laws, including by providing, deleting or correcting the relevant Personal Data, or by enabling Customer to do the same, insofar as this is possible; to the extent required by Privacy Laws, conducting data protection impact assessments and, if required, prior consultation with relevant competent authorities.Excerpt from Perplexity AI's Perplexity Data Processing Addendum
REGULATORY LANDSCAPE: This provision engages GDPR Articles 35 (data protection impact assessments) and 36 (prior consultation with supervisory authorities), which impose mandatory obligations on controllers processing data likely to result in high risk to individuals. The Irish DPC is the designated competent supervisory authority for EU purposes. The conditioning of DPIA assistance on 'to the extent required by Privacy Laws' means the scope of assistance may vary by jurisdiction and processing activity. GOVERNANCE EXPOSURE: Low. DPIA assistance obligations are standard in GDPR-compliant processor agreements. However, the conditional framing ('to the extent required by Privacy Laws') means that Customer should not assume Perplexity will proactively offer DPIA assistance without a specific request grounded in a legal requirement. JURISDICTION FLAGS: EU/EEA and UK customers have the most direct exposure given GDPR Articles 35 and 36. The scope of DPIA assistance under US state privacy laws varies and is generally less prescriptive. CONTRACT AND VENDOR IMPLICATIONS: Procurement teams should confirm that Perplexity's DPIA assistance extends to new processing activities (such as the introduction of new Model Providers) and that the process for requesting such assistance is documented. COMPLIANCE CONSIDERATIONS: Legal teams should conduct DPIAs for deployments involving high-risk processing activities and should document requests for Perplexity's assistance in the DPIA record. Where prior consultation with the Irish DPC or another supervisory authority is required, teams should initiate the process early and confirm Perplexity's cooperation obligations under this provision.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes Perplexity's obligation to support Customer's DPIA and supervisory authority consultation obligations under GDPR Articles 35 and 36, conditioning that support on the extent required by applicable Privacy Laws.
The agreement requires Perplexity to assist with data subject rights requests and, where required by Privacy Laws, with conducting DPIAs and prior regulatory consultation, supporting Customer's compliance obligations under GDPR and equivalent laws.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Perplexity AI.