GDPR

FAQs

• What is GDPR?

  The General Data Protection Regulation (GDPR) is a comprehensive privacy law enacted by the European Union in 2018. It regulates how organizations collect, use, store, and transfer personal data of individuals located in the EU, regardless of the company’s location. Key principles of GDPR include consent, transparency, data minimization, security controls, and data subject rights such as access and erasure.

• Can I access Zilliz’s GDPR documentation or DPF status?

  Yes. Upon request and under NDA, Zilliz can provide:

  • GDPR compliance summaries;
  • Our SCC templates;
  • Transfer Impact Assessment (TIA) samples;
  • DPF application status letter or confirmation. To request documentation, please contact us.

• Is Zilliz Cloud GDPR Compliant?

  Yes. Zilliz is GDPR ready and has implemented a privacy management program aligned with the General Data Protection Regulation (GDPR). Our program includes data minimization, access controls, data subject rights response procedures, and transfer mechanisms such as SCCs and TIAs to support customer compliance.

• How does Zilliz handle data subject rights requests?

  Zilliz has a formal process in place to respond to Data Subject Requests (DSRs), including access, rectification, erasure, and restriction of processing. To submit a request, users can contact us at privacy@zilliz.com and we will respond within a reasonable timeframe.

• Does Zilliz use Standard Contractual Clauses (SCCs) for data transfers?

  Yes. For transfers of personal data from the EU, Zilliz uses the EU Standard Contractual Clauses (SCCs) as the legal mechanism. We also perform Transfer Impact Assessments (TIAs) where applicable, to assess the legal risks of data transfers to third countries.

• Is Zilliz applying for the EU-U.S. Data Privacy Framework (DPF)?

  Zilliz is already certified under the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the DPF, and the Swiss-U.S. DPF. Our organization is officially listed in the U.S. Department of Commerce’s Data Privacy Framework List, demonstrating our commitment to enabling lawful cross-border data transfers and upholding high standards of data protection for personal data originating from the EU, UK, and Switzerland.

• What does DPF certification mean for customers?

  The DPF is a recognized legal framework for data transfers from the EU to certified organizations in the U.S. Once certified, Zilliz will be officially recognized as providing an “adequate level of data protection” for EU data, enabling lawful and secure data transfers under GDPR.