Region-Specific Data Privacy Laws

Region-Specific Data Privacy Laws

Table of Contents

Product Terms

Terms of Service

Standard Service Level Agreement

Product-Specific Terms

Partner Terms

One-Time Reseller Agreement

Policies & Other Terms

Privacy Policy

Acceptable Use Policy

Community Policy

Champions Terms

DMCA Takedown Notice

Subprocessors

Support Policy

CSE Usage Policy

Jeli Legacy Support Policy

Process Automation

Data Processing Addendum

Information Security Practices

Modern Slavery Act

Safe Harbor

Cigna Machine Readable Files

Event Terms

Trial Terms

Security

Overview

Security Disclosure

Safe and Secure Generative AI

In Scope Services

Privacy

Privacy FAQs

Privacy Shield and Schrems II

PagerDuty's GDPR Approach

Region-Specific Data Privacy Laws

Region-Specific Data Privacy Laws

PagerDuty is proud to support the digital operations of customers across the globe and protect their data in compliance with applicable global privacy and data protection laws. This page outlines some additional information about how PagerDuty addresses several data privacy laws with respect to our products.

This page is intended for PagerDuty customers, and describes how we treat Customer Personal Data (as that term is defined in our online Data Processing Addendum) when we provide our Services to and at the direction of our customers (i.e., in our role as a processor and/or service provider). PagerDuty also conducts certain activities for our own purposes, such as marketing, recruiting, and service usage (and in those cases, acts as a controller and/or business). To read more about PagerDuty’s privacy practices in that context, please view our Privacy Policy.

CCPA/CPRA (California)

GDPR (European Union)

PIPEDA (Canada)

Privacy Act 1988 (Australia)

CCPA/CPRA (California)

What are the CCPA and CPRA?

The California Consumer Privacy Act is a California state law that was amended and expanded by the California Privacy Rights Act (“CPRA”) (together, the “CCPA”). The CCPA regulates how businesses collect, use, and share personal data, and grants individuals specific rights regarding their personal data. It applies to for-profit businesses that operate in California and meet certain thresholds, regardless of where the business is physically located. Businesses must provide clear notice about their data practices, and honor individuals’ rights, including among others, the right to know about how their personal data is collected and used, the right to request deletion, the right to correct inaccurate information, and the right to opt out of sales of their personal data.

What is PagerDuty’s role in processing Customer Personal Data?

PagerDuty is generally a service provider to our customers when we provide our Services. We process Customer Personal Data on behalf of our customers and in accordance with their written instructions. You can read more about how PagerDuty handles Customer Personal Data in our Data Processing Addendum.

Does PagerDuty “sell” or “share” Customer Personal Data?

No. Per the terms of our Data Processing Addendum, PagerDuty does not “sell” or “share” Customer Personal Data in our role as a service provider, as those terms are defined in the CCPA.

How does PagerDuty help its Customers comply with the CCPA?

As a service provider, PagerDuty cooperates with and provides assistance to customers with fulfilling their obligations under the CCPA. Some of these measures include: assistance with and the fulfillment of data subject requests, comprehensive privacy and security programs, development and implementation of incident response and security breach notification policies and procedures, and an appropriate Data Processing Addendum, which includes a specific section addressing CCPA requirements (Section 9).