Pinterest transfers your personal data from the EU, UK, and Switzerland to the United States using legal mechanisms including Standard Contractual Clauses and the EU-US Data Privacy Framework to comply with data transfer rules.
Your personal data collected in the EU, UK, or Switzerland is transferred to and processed in the United States, with legal protection provided by Standard Contractual Clauses and the EU-US Data Privacy Framework, though the adequacy of US surveillance law protections remains a contested legal question.
Cross-platform context
See how other platforms handle International Data Transfers via Standard Contractual Clauses and similar clauses.
Compare across platforms →International data transfers carry legal risk if transfer mechanisms are challenged or invalidated, and users should know their data leaves their jurisdiction and the legal protections that apply.
REGULATORY FRAMEWORK: This provision implicates GDPR Chapter V (Arts. 44–49) on transfers to third countries, specifically Art. 46(2)(c) (SCCs) and the EU-US Data Privacy Framework (DPF) adequacy decision (Commission Implementing Decision 2023/1795). UK GDPR and the UK's International Data Transfer Agreement (IDTA) apply for UK transfers. Swiss FADP applies for Swiss transfers. The CJEU's Schrems II decision (Case C-311/18) established the legal framework for SCC-based transfers, including the requirement for transfer impact assessments (TIAs). The Irish DPC and UK ICO are primary enforcement authorities.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.