EVEN applies the rules of each jurisdiction rather than one global policy. That means GDPR in the EU and UK, CCPA in California, and the equivalent regime everywhere else.
How partner access works
Partners reach fan data through the platform's compliance controls, never through a raw cross-border file. Sending a file of EU fan records straight to a label creates real legal exposure. Granting access through the controls instead keeps the lawful basis attached to the data.
Consent as the foundation
Consent is captured expressly, per channel, with timestamps and disclosure versions logged. When a regulator or a label's own compliance team asks what a fan agreed to and when, that logged record answers them.
Controller and processor
EVEN honors fan privacy requests under the controller and processor structure that applies to the campaign. Your EVEN team confirms that structure with you during setup, so it is settled long before the first request arrives.
What your team should do
Bring your own compliance requirements to kickoff. If your label has specific obligations on data residency, retention or partner access, say so early. Building those into the campaign at the start is far easier than retrofitting them after launch.