This analysis describes what Starbucks's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause places the burden on Starbucks to prove non-responsibility when an agent violates DPF Principles, giving affected individuals a direct liability pathway against Starbucks rather than only against the agent.
If a Starbucks agent mishandles your personal information in violation of EU-U.S. DPF Principles, Starbucks remains liable unless it proves it is not responsible.
How other platforms handle this
The Credit Karma Parties reserve the right, at their own expense, to assume the exclusive defense and control of any matter subject to indemnification by you
The Indemnifying Party will have the sole right to conduct the defense of any Claim for which the Indemnifying Party is responsible hereunder, provided that the Indemnifying Party may not settle any Claim without the Indemnified Party's prior written approval unless...
In the event you are required to indemnify us pursuant to this Agreement or any court rulings, you must secure all necessary approvals and consents from regulatory authorities for the remittance of any indemnified amount to us.
"Starbucks Corporation remains liable under the EU-U.S. DPF Principles...if an agent of Starbucks Corporation processes personal information in a manner inconsistent with the EU-U.S. DPF Principles...unless Starbucks Corporation proves that it is not responsible...Excerpt from Starbucks's Privacy Policy
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This clause places the burden on Starbucks to prove non-responsibility when an agent violates DPF Principles, giving affected individuals a direct liability pathway against Starbucks rather than only against the agent.
If a Starbucks agent mishandles your personal information in violation of EU-U.S. DPF Principles, Starbucks remains liable unless it proves it is not responsible.
ConductAtlas has identified this type of provision across 225 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Starbucks.