As of September 12, 2025, the EU Data Act gives Salesforce customers in the EU the right to access, transfer, or delete their data, providing more control and flexibility over how their information is used.
This analysis describes what Salesforce's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause operationalizes EU Data Act compliance mechanisms, establishing procedural requirements for data access, portability, and customer control rights that affect how Salesforce manages and provides access to customer-generated data within its systems.
EU customers now have enforceable rights to request access to, portability of, and deletion of their data held by Salesforce under the EU Data Act. This directly affects data sovereignty and the ability to switch providers without losing access to business data.
How other platforms handle this
Customer shall: Comply with its obligations under the Applicable Data Protection Law regarding the Processing and any instruction provided to Mistral AI, Provide notice and obtain all consents and rights required by the Applicable Data Protection Law for Mistral AI to Process Personal Data as part o...
If you are a California resident, you have specific rights under the California Consumer Privacy Act and California Privacy Rights Act. These rights include the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing...
If you are a California resident, you have certain rights with respect to your personal information under the California Consumer Privacy Act (CCPA). These rights include the right to know about the personal information we collect, use, disclose, and sell; the right to request deletion of your perso...
Monitoring
Salesforce has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
The EU Data Act (Regulation 2023/2854), effective September 12, 2025, imposes mandatory data portability and deletion obligations on data holders like Salesforce. Compliance teams should assess whether Salesforce's data processing agreements and DPAs have been updated to reflect these obligations and confirm that data egress procedures are operationally in place.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The clause operationalizes EU Data Act compliance mechanisms, establishing procedural requirements for data access, portability, and customer control rights that affect how Salesforce manages and provides access to customer-generated data within its systems.
EU customers now have enforceable rights to request access to, portability of, and deletion of their data held by Salesforce under the EU Data Act. This directly affects data sovereignty and the ability to switch providers without losing access to business data.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Salesforce.