No public evidenceYahoo and GDPR
CertReports found no public GDPR evidence for Yahoo as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 9 Oct 2024
- Expires or valid through
- 6 Oct 2026
- Scope
- Non-HR Data: Yahoo processes personal data for various purposes, including to provide the services offered by Yahoo, to protect Yahoo’s services and systems, to understand how Yahoo’s services work, to improve existing services and features and develop new ones, and to comply with applicable laws and obligations. The personal data processed may include information such as names, email addresses, contact information, account and device identifiers, search and browsing information, IP addresses and location data. Yahoo shares personal data with other Yahoo group affiliates for these purposes. Yahoo may also share personal data with e-commerce partners, search partners, content and social media partners, advertising partners, third parties who help us provide our services and governmental and regulatory bodies in accordance with applicable law. Further information is available in our relevant privacy policies. HR Data: Yahoo processes HR data to manage employee relationships and relationships with its personnel, comply with legal and other requirements (such as in relation to work permits, tax and social security, and health and safety), improve efficiencies and processes, protect the assets of the Yahoo group, for safety and security and as necessary for the purposes of legal claims or where otherwise required or permitted by applicable laws. The HR data processed may include information such as names, email addresses, contact information, date of birth, employment details (including job title and department), payroll and tax information, benefits and insurance details, and, where necessary, limited health or leave-related information. Yahoo may share HR data for these purposes with other Yahoo group affiliates and/or third parties such as bank and payroll processors, tax authorities and insurance and benefits providers. Further information is available in our relevant privacy policies.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Yahoo, Inc: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 7e9373034c |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Yahoo GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Marketing category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Marketing vendor has GDPR evidence in the index yet.