Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy notifies Canadian users that their personal information is stored on US-based servers and states that accepting the policy constitutes acknowledgment of this cross-border transfer.
This analysis describes what TaskRabbit's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision frames Canadian user consent to cross-border data transfer as implicit in accepting the privacy policy, which may require evaluation against Canadian privacy legislation governing cross-border transfers and accountability obligations.
Interpretive note: Whether policy acceptance constitutes adequate consent or notification for cross-border transfer under Canadian federal and provincial privacy law depends on the specific requirements of PIPEDA, Quebec Law 25, and other applicable provincial legislation, which may impose more prescriptive requirements than the policy language contemplates.
The agreement states that Canadian users' personal information is stored on US servers, and that accepting the privacy policy terms constitutes acknowledgment of this transfer. Canadian users do not have a separate opt-in or opt-out mechanism for this cross-border processing as described in the policy.
How other platforms handle this
In certain circumstances, the right to data portability, which means that you can request that we provide certain Personal Data we hold about you in a machine-readable format
If you want to see what information we have collected about you, you can request a copy of your data in the Data & Privacy section of your User Settings. You should receive your data packet within 30 days.
For data portability requests, We will select a format to provide Your personal information that is readily useable and should allow You to transmit the information from one entity to another entity without hindrance.
Monitoring
TaskRabbit has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Transfer Of Data. We and our affiliates primarily store your Personal Information on servers located and operated within the United States to provide and operate the Platform. By accepting the terms of this Privacy Policy, you acknowledge the transfer to and processing of your Personal Information on servers located in the U.S..Excerpt from TaskRabbit's Privacy Policy
(1) REGULATORY LANDSCAPE: Cross-border transfer of Canadian users' personal information to the United States engages the Personal Information Protection and Electronic Documents Act (PIPEDA) and its successor legislation, Bill C-27 (Consumer Privacy Protection Act, pending in Canada), as well as provincial privacy laws in Quebec (Law 25), Alberta, and British Columbia. The Office of the Privacy Commissioner of Canada has enforcement authority. Quebec's Law 25 imposes specific requirements for cross-border data transfer agreements and privacy impact assessments. (2) GOVERNANCE EXPOSURE: Medium. The policy's reliance on policy acceptance as the mechanism for cross-border transfer consent may not satisfy the accountability-based transfer requirements under PIPEDA, which require organizations to use contractual or other means to provide comparable protection when transferring data to third parties including foreign affiliates. Quebec's Law 25 imposes a more prescriptive privacy impact assessment requirement for international transfers. (3) JURISDICTION FLAGS: Quebec residents face heightened exposure due to Law 25's requirements for documented cross-border transfer agreements and privacy impact assessments. Alberta and British Columbia have substantially similar private-sector privacy laws to PIPEDA that may also apply. (4) CONTRACT AND VENDOR IMPLICATIONS: Organizations in Canada procuring TaskRabbit services should assess whether the cross-border transfer mechanism meets their obligations under applicable Canadian privacy law, particularly if they are themselves subject to PIPEDA or provincial equivalents. (5) COMPLIANCE CONSIDERATIONS: Legal teams with Canadian operations should assess whether the policy acceptance mechanism constitutes adequate consent for cross-border transfer under PIPEDA and whether a cross-border transfer agreement between the Canadian and US entities has been documented. Quebec-based users may require a privacy impact assessment disclosure.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision frames Canadian user consent to cross-border data transfer as implicit in accepting the privacy policy, which may require evaluation against Canadian privacy legislation governing cross-border transfers and accountability obligations.
The agreement states that Canadian users' personal information is stored on US servers, and that accepting the privacy policy terms constitutes acknowledgment of this transfer. Canadian users do not have a separate opt-in or opt-out mechanism for this cross-border processing as described in the policy.
ConductAtlas has identified this type of provision across 295 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TaskRabbit.