No public evidenceTwitter and GDPR
CertReports found no public GDPR evidence for Twitter as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 16 Nov 2016
- Scope
- Twitter, Inc. receives and processes personal information relating to natural persons in the EU/EEA and in the United Kingdom who are employees, prospective employees, or individual contacts of corporate customers (including advertisers), suppliers, service providers and other corporate business partners. Twitter, Inc. typically receives such information from Twitter International Company or its subsidiaries in the EU/EEA and in the United Kingdom. Twitter, Inc., provides web-hosting and a wide range of technical services for Twitter International Company, its subsidiaries, and other entities, such as advertisers and partners. Twitter, Inc. may also process personal information provided by Twitter International Company’s or its subsidiaries’ corporate business partners based in the EU/EEA and in the United Kingdom. The personal information described above is collected, held and processed for different purposes, which may include any of the following: for sales and marketing to consumers and businesses; effecting transactions with consumers and businesses; providing, understanding, improving, and customizing services and products for consumers and businesses; financial processing and management; supplier, vendor, and partner relationship management; customer support and customer relationship management; human resources, operations, and security management; and legal and regulatory compliance. The personal information described above is not disclosed to third parties except in the limited circumstances described in the Privacy Policy, including with consent; to a service provider subject to appropriate privacy, confidentiality, and security measures; to comply with a law or regulation or protect against harm; or to a corporate affiliate or in connection with a business transfer.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Twitter: Inactive | Live pagesha256 eea04b8e91 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Twitter GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Other software category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Other software vendor has GDPR evidence in the index yet.