31 December, 2020



Lemonade is required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. Lemonade’s accountability for personal data that it receives in the US under the Privacy Shield and subsequently transfers to a third party is described in the Principles. In particular, Lemonade remains responsible and liable under the Principles if third parties that it engages to process the personal data on its behalf do so in a manner inconsistent with the Principles, unless Lemonade proves it is not responsible for the event giving rise to the damage.