Revolut states it transfers personal data internationally and uses Standard Contractual Clauses or other appropriate safeguards to protect data when it leaves the UK.
This analysis describes what Revolut's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Your personal data may be processed in countries outside the UK with different levels of data protection, and the adequacy of the safeguards in place determines how well your data is protected internationally.
Interpretive note: The master notice references international transfers and safeguards at a high level without identifying specific destination countries or transfer mechanisms, creating uncertainty about the full scope of international data flows.
Your personal data held by Revolut may be transferred to and processed in countries outside the UK, including potentially the US or other jurisdictions with different privacy standards, though Revolut states it applies appropriate transfer safeguards.
How other platforms handle this
If you are located in the European Economic Area, the United Kingdom, or Switzerland, please be aware that we may transfer your personal information to countries outside of these regions, including to the United States, where data protection laws may not provide the same level of protection as those...
You will provide personal information directly to our website in the United States. We may also transfer personal information to our partners and service providers in the United States and other jurisdictions. Please note that such jurisdictions may not provide the same protections as the data prote...
ClickUp is based in the United States and the information we collect is governed by U.S. law. By accessing or using our Services or otherwise providing information to us, you consent to the processing and transfer of information in and to the U.S. and other countries, where you may not have the same...
Monitoring
Revolut has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Our promises: we will always keep your personal data safe. We will never sell your personal data. We will always try to give you as much control as possible over how we use your personal data.— Excerpt from Revolut's Revolut Privacy Policy
(1) REGULATORY LANDSCAPE: UK GDPR Chapter V governs international transfers of personal data from the UK. Post-Brexit, the UK has its own adequacy decision framework operated by the Secretary of State for Digital, Culture, Media and Sport, separate from EU GDPR adequacy decisions. Standard Contractual Clauses under UK GDPR, known as the International Data Transfer Agreement or addendum to EU SCCs, are the primary mechanism for transfers to non-adequate countries. The ICO oversees compliance with UK international transfer requirements. (2) GOVERNANCE EXPOSURE: Medium. International data transfers in a multi-entity fintech group operating across multiple jurisdictions are complex and require ongoing monitoring of adequacy decisions and transfer mechanism validity. Revolut's group structure across the UK, EEA, and other jurisdictions creates multiple transfer pathways that each require documented mechanisms. (3) JURISDICTION FLAGS: Transfers to the US are subject to the UK-US Data Bridge adequacy framework or SCCs. Transfers to EEA countries benefit from UK adequacy decisions for the EEA. Transfers to other third countries require case-by-case assessment. The ICO's enforcement posture on international transfers has been active, and any gaps in transfer mechanisms could attract regulatory attention. (4) PROCUREMENT IMPLICATIONS: All third-party processors and sub-processors receiving UK personal data outside the UK must be covered by appropriate transfer mechanisms documented in data processing agreements. Regular reviews are needed as adequacy decisions and transfer frameworks can change. (5) COMPLIANCE CONSIDERATIONS: Legal teams should maintain a data transfer impact assessment register for all third-country transfers, ensure that transfer mechanisms are current and reflect the latest ICO-approved forms, and monitor changes to UK adequacy decisions that could affect existing transfer arrangements.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Your personal data may be processed in countries outside the UK with different levels of data protection, and the adequacy of the safeguards in place determines how well your data is protected internationally.
Your personal data held by Revolut may be transferred to and processed in countries outside the UK, including potentially the US or other jurisdictions with different privacy standards, though Revolut states it applies appropriate transfer safeguards.
ConductAtlas has identified this type of provision across 48 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Revolut.