Telegram shares your personal data with its parent company in the British Virgin Islands and a related company in Dubai, using EU-approved contract clauses as the legal safeguard for these transfers.
Your personal data is shared with Telegram entities in the British Virgin Islands and Dubai, jurisdictions without EU-equivalent data protection laws, with only contractual clauses (not enforceable local law) protecting your data once transferred.
Cross-platform context
See how other platforms handle International Data Transfers to BVI and Dubai Group Companies and similar clauses.
Compare across platforms →Your data is transferred to companies in the BVI and Dubai — neither of which has an EU adequacy decision — meaning the protection of your data depends entirely on the enforceability of contractual clauses in jurisdictions with limited data protection oversight.
REGULATORY FRAMEWORK: This provision engages GDPR Art. 44-49 (international data transfers), Art. 46(2)(c) (standard contractual clauses), and the European Commission's 2021 SCCs (Implementing Decision 2021/914). The BVI and UAE (Dubai) do not have EU adequacy decisions. Schrems II (C-311/18) requires transfer impact assessments (TIAs) for all Art. 46 transfer mechanisms. The UK ICO's International Data Transfer Agreement (IDTA) applies for UK-origin transfers. Enforcement authority is the competent EEA national DPA and UK ICO.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.