PlanetScale has certified under the EU-US Data Privacy Framework, meaning it has committed to specific data protection standards for data transferred from the EU, UK, and Switzerland to the US, and the FTC can enforce these commitments.
This analysis describes what PlanetScale's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
EU, UK, and Swiss users have a formal mechanism to raise privacy disputes through VeraSafe's dispute resolution process and ultimately through binding arbitration if PlanetScale and VeraSafe cannot resolve a complaint, providing a meaningful enforcement pathway not available in many commercial privacy policies.
EU, UK, and Swiss users whose personal data is transferred to PlanetScale in the US are protected by DPF Principles, have access to a free VeraSafe dispute resolution process, and can pursue binding arbitration if complaints remain unresolved; however, PlanetScale may still disclose their data in response to US national security or law enforcement requests.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"PlanetScale Inc. participates in the EU-US Data Privacy Framework, the UK Extension to the EU-US Data Privacy Framework, and the Swiss-US Data Privacy Framework for the collection, use, and retention of personal information from the European Union and European Economic Area member countries, the United Kingdom and Switzerland. We have certified with the Department of Commerce that we adhere to the Data Privacy Framework Principles. [...] PlanetScale is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). We may be required to disclose personal information that we handle under the Data Privacy Framework in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.Excerpt from PlanetScale's Privacy Policy
(1) REGULATORY LANDSCAPE: The EU-US Data Privacy Framework (DPF), administered by the US Department of Commerce, provides a GDPR-compliant transfer mechanism following the Court of Justice of the EU's Schrems II decision and the European …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
EU, UK, and Swiss users have a formal mechanism to raise privacy disputes through VeraSafe's dispute resolution process and ultimately through binding arbitration if PlanetScale and VeraSafe cannot resolve a complaint, providing a meaningful enforcement pathway not available in many commercial privacy policies.
EU, UK, and Swiss users whose personal data is transferred to PlanetScale in the US are protected by DPF Principles, have access to a free VeraSafe dispute resolution process, and can pursue binding arbitration if complaints remain unresolved; however, PlanetScale may still disclose their data in response to US national security or law enforcement requests.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by PlanetScale.