Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The statement discloses that Salesforce processes Personal Data through CCTV recording at its offices, premises, and events, relying on legitimate interest or legal obligation as the legal basis.
This analysis describes what Salesforce's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that individuals visiting Salesforce offices or attending events are subject to video surveillance processing, which engages GDPR legitimate interest balancing obligations for physical surveillance and may interact with state-level video surveillance and workplace monitoring laws.
Under this provision, individuals visiting Salesforce offices, premises, or events will have their image and movements recorded via CCTV. The agreement states this processing relies on legitimate interest in safety and security or legal obligation.
Cross-platform context
See how other platforms handle CCTV and Office Surveillance and similar clauses.
Compare across platforms →Monitoring
Salesforce has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Safeguarding the safety and security of our employees and visitors through CCTV recording, when visiting our offices, premises and events We process your Personal data via CCTV for purposes related with ensuring the safety and security at our offices, premises and events Our legitimate interest in ensuring the safety and security of our office visitors and employees via CCTV video surveillance or where it is necessary for Salesforce to comply with its legal obligationsExcerpt from Salesforce's Privacy Statement
(1) REGULATORY LANDSCAPE: This provision engages GDPR Article 6(1)(f) and EDPB guidelines on video surveillance, UK ICO guidance on CCTV in workplaces and public-facing premises, and applicable national laws in jurisdictions where Salesforce operates offices. State-level workplace monitoring laws in various U.S. states may also apply. (2) GOVERNANCE EXPOSURE: Low. CCTV use for security purposes under legitimate interest is a commonly observed practice and is addressed in GDPR supervisory authority guidance. Exposure increases if footage is retained longer than necessary or shared without appropriate safeguards. (3) JURISDICTION FLAGS: EU and UK offices are subject to GDPR and national surveillance laws requiring signage, retention limits, and access procedures. Some U.S. states require employee or visitor notice of video recording. (4) CONTRACT AND VENDOR IMPLICATIONS: No direct contract implications for visitors; employee-facing implications for organizations whose staff visit Salesforce premises should be addressed in employee data protection notices. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that CCTV retention periods are documented, that appropriate notices are posted at premises, and that access to footage is restricted to authorized personnel.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes that individuals visiting Salesforce offices or attending events are subject to video surveillance processing, which engages GDPR legitimate interest balancing obligations for physical surveillance and may interact with state-level video surveillance and workplace monitoring laws.
Under this provision, individuals visiting Salesforce offices, premises, or events will have their image and movements recorded via CCTV. The agreement states this processing relies on legitimate interest in safety and security or legal obligation.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Salesforce.