This provision states that X uses standard contractual clauses and participates in the EU-US Data Privacy Framework, Swiss-US DPF, and UK Extension to the EU-US DPF as legal mechanisms for transferring personal data from the EU, Switzerland, and UK to the US, and requires third parties receiving data to maintain equivalent protections.
This analysis describes what X's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause identifies the legal transfer mechanisms X relies on for cross-border data flows from the EU, Switzerland, and UK. The DPF is subject to ongoing legal and political scrutiny, and SCCs require case-by-case transfer impact assessments under GDPR; the adequacy of these mechanisms for specific transfer relationships may require evaluation by compliance teams.
Cross-platform context
See how other platforms handle Cross-Border Data Transfers and DPF Participation and similar clauses.
Compare across platforms →"Before we move data between countries we look at the risks that may be presented to the data and rely on standard contractual clauses (SCCs), where applicable, to ensure your data rights are protected. To request a copy of the SCCs, please contact us here. If data will be shared with a third party, we require them to maintain the same protections over your data that we provide directly. X is a participant in the EU-US Data Privacy Framework (DPF), the Swiss-US DPF and the UK Extension to the EU-US DPF. X complies with the DPF Principles for all its processing of personal data received from the European Union, Switzerland and the UK, in reliance on the EU-US DPF, Swiss-US DPF and UK Extension to the EU-US DPF, respectively.Excerpt from X's Privacy Policy
REGULATORY LANDSCAPE: This provision engages GDPR Chapter V requirements for cross-border data transfers, the EU-US Data Privacy Framework, Swiss-US DPF, and UK Extension to the EU-US DPF, and the EU Standard Contractual Clauses framework.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This clause identifies the legal transfer mechanisms X relies on for cross-border data flows from the EU, Switzerland, and UK. The DPF is subject to ongoing legal and political scrutiny, and SCCs require case-by-case transfer impact assessments under GDPR; the adequacy of these mechanisms for specific transfer relationships may require evaluation by compliance teams.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by X.