Skip to main content
X logo

X

GDPR evidence

From breaking news and entertainment to sports and politics, get the full story with all the live

x.comMedia and contentLast verified 2 Nov 2026
Request the report Are you X?
GDPR mark, CertReports state No public evidenceNo public evidence

X and GDPR

CertReports found no public GDPR evidence for X as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.

Are you the vendor? Add evidenceVendor trust centre

Evidence

VerifiedActive: EU-US Certification, UK Extension Certification, SW-US Certification
as of 2 Nov 2026 · confidence 100%
Kind
Listing
Issued or listed
4 Apr 2024
Expires or valid through
2 Apr 2027
Scope
X Corp. receives and processes personal information relating to natural persons in the EU/EEA and in the United Kingdom who are employees, prospective employees, or individual contacts of corporate customers (including advertisers), suppliers, service providers and other corporate business partners. X Corp. typically receives such information from X International Unlimited Company (XIUC) or its subsidiaries in the EU/EEA and in the United Kingdom. X Corp provides web-hosting and a wide range of technical services for XIUC, its subsidiaries, and other entities, such as advertisers and partners. X Corp. may also process personal information provided by XIUC’s or its subsidiaries’ corporate business partners based in the EU/EEA and in the United Kingdom. The personal information described above is collected, held and processed for different purposes, which may include any of the following: for sales and marketing to consumers and businesses; effecting transactions with consumers and businesses; providing, understanding, improving, and customizing services and products for consumers and businesses; financial processing and management; supplier, vendor, and partner relationship management; customer support and customer relationship management; human resources, operations, and security management; and legal and regulatory compliance. The personal information described above is not disclosed to third parties except in the limited circumstances described in the Privacy Policy, including with consent; to a service provider subject to appropriate privacy, confidentiality, and security measures; to comply with a law or regulation or protect against harm; or to a corporate affiliate or in connection with a business transfer.
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
2 Nov 2026X Corp.: Active: EU-US Certification, UK Extension Certification, SW-US Certification
Live pagesha256 8981a67ac3
This is wrong
What GDPR means, and what it does not

"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.

Read the GDPR guide and browse all vendors with evidence

Questions buyers ask

Is X GDPR compliant?

There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.

Alternatives with GDPR evidence

Similar vendors (shared product tags or the Media and content category) whose GDPR row is verified or vendor-stated, ranked by similarity.

No Media and content vendor has GDPR evidence in the index yet.

Understand GDPR evidence

All articles