Visa publishes jurisdiction-specific supplemental privacy notices for at least twelve regions, stating that these notices provide information required by applicable local law in addition to the Global Privacy Notice.
This analysis describes what Visa's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that users in covered jurisdictions are subject to region-specific privacy terms that may grant rights or impose obligations beyond the Global Privacy Notice, requiring users and compliance teams to consult the applicable regional notice to understand the full scope of their rights.
Interpretive note: The specific rights, obligations, and data processing terms applicable in each jurisdiction are not contained in this document and require review of each linked regional notice.
Under this provision, users in the listed jurisdictions have access to supplemental privacy disclosures tailored to local legal requirements, which may include rights not available under the Global Privacy Notice alone, such as data subject access, portability, or erasure rights specific to their region.
Cross-platform context
See how other platforms handle Jurisdiction-Specific Supplemental Privacy Notices and similar clauses.
Compare across platforms →"The following supplemental and additional privacy notices provide added information as required by law: Candidate Privacy Notice For Argentina (Spanish) For Australia (English) For Brazil (Portuguese) For Canada (English) For China Mainland (Simplified Chinese) For Colombia (Spanish) For European Economic Area (EEA)/Switzerland/UK (English) For Japan (Japanese) For New Zealand (English) For South Korea (Korean) For Taiwan (Traditional Chinese) For Turkey (Turkish)Excerpt from Visa's Privacy Notice
(1) REGULATORY LANDSCAPE: Each regional notice engages a distinct legal framework: GDPR and UK GDPR for EEA/Switzerland/UK, LGPD for Brazil, PIPEDA and provincial laws for Canada, PIPL for China Mainland, Act on the Protection of …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that users in covered jurisdictions are subject to region-specific privacy terms that may grant rights or impose obligations beyond the Global Privacy Notice, requiring users and compliance teams to consult the applicable regional notice to understand the full scope of their rights.
Under this provision, users in the listed jurisdictions have access to supplemental privacy disclosures tailored to local legal requirements, which may include rights not available under the Global Privacy Notice alone, such as data subject access, portability, or erasure rights specific to their region.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Visa.