Salesforce publicly acknowledges that the EU Data Act took effect on September 12, 2025, and that it gives EU customers new rights to access, transfer, or delete their data held by Salesforce.
EU Salesforce customers gained enforceable rights on September 12, 2025 to access, transfer, and delete their data under the EU Data Act — rights that go beyond prior GDPR portability provisions and apply specifically to data generated through use of Salesforce's connected products and services.
Cross-platform context
See how other platforms handle EU Data Act Compliance Notice and similar clauses.
Compare across platforms →This is a direct acknowledgment by Salesforce of binding EU regulatory obligations — EU customers now have enforceable rights to data portability and deletion under the EU Data Act that Salesforce must honor.
(1) REGULATORY FRAMEWORK: The EU Data Act (Regulation 2023/2854) is enforced by EU Member State competent authorities designated under Article 37. It creates obligations for data holders (including cloud service providers like Salesforce) to make data accessible and portable upon user request, with interoperability requirements. It intersects with GDPR Article 20 (data portability) but extends beyond personal data to include non-personal IoT and cloud-generated data. Cloud switching obligations under Chapter VI of the Data Act are also applicable to Salesforce as a cloud service provider. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.