The document designates Stripe Technology Company Limited, an Irish entity, as a new data controller with primary responsibility for processing personal data outside of the Americas. This designation applies to EMEA and APAC regions.
This analysis describes what Stripe's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The introduction of a new data controller entity may alter the legal basis and accountability structure governing personal data processing for Business Users and their End Customers in EMEA and APAC. Business Users who have documented Stripe's controller identity in their own privacy notices, DPAs, or Article 30 records may need to update those references.
Under the updated terms, Stripe Technology Company Limited replaces or supplements prior controller entities for personal data processed in EMEA and APAC regions. Business Users in these regions may need to update their own privacy documentation and data processing agreements to reflect the new controller identity.
Cross-platform context
See how other platforms handle New EMEA and APAC Data Controller Designation (Stripe Technology Company Limited) and similar clauses.
Compare across platforms →"Stripe Technology Company Limited (STC) is a new data controller for Stripe in the EMEA and APAC regions. Please visit our Privacy Center for more information on Stripe data controllers.Excerpt from Stripe's Service Providers (Sub-Processors)
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The introduction of a new data controller entity may alter the legal basis and accountability structure governing personal data processing for Business Users and their End Customers in EMEA and APAC. Business Users who have documented Stripe's controller identity in their own privacy notices, DPAs, or Article 30 records may need to update those references.
Under the updated terms, Stripe Technology Company Limited replaces or supplements prior controller entities for personal data processed in EMEA and APAC regions. Business Users in these regions may need to update their own privacy documentation and data processing agreements to reflect the new controller identity.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stripe.