Spotify works with technical service partners to help protect user accounts.
Supporting quotations
We also work with technical service partners who help us protect user accounts.
purpose: security
Security & Safeguards · Company practice
Keeping the service secure and preventing fraud
Spotify uses personal data, including Usage Data, to keep its service secure and to detect and prevent fraud, such as analyzing usage patterns for fraudulent activity.
Supporting quotations
To keep the Spotify Service secure and to detect and prevent fraud.
For example, when we analyze Usage Data to check for fraudulent use of the Spotify Service.
Measures for international data transfer compliance
Spotify uses tools and additional protections, such as encryption, pseudonymization, and policies to challenge government requests, to ensure international personal data transfers comply with applicable law.
Supporting quotations
Whenever we transfer personal data internationally, we use tools to make sure the data transfer complies with applicable law.
We also identify and use additional protections as appropriate for each data transfer. For example, we use:
technical protections, such as encryption and pseudonymization
policies and processes to challenge disproportionate or unlawful government authority requests
purpose: security · purpose: legal_compliance
Cross-references
supports (model-proposed): International data transfers — Measures for international data transfer compliance support international data transfers
Security & Safeguards · Company commitment
Commitment to data security
Spotify is committed to protecting user personal data and implements appropriate technical and organizational measures, including pseudonymization, encryption, access, and retention policies, to help secure it.
Supporting quotations
We’re committed to protecting our users’ personal data. We put in place appropriate technical and organizational measures to help protect the security of your personal data. However, be aware that no system is ever completely secure.
We have put various safeguards in place to guard against unauthorized access and unnecessary retention of personal data in our systems. These include pseudonymization, encryption, access, and retention policies.