Standards, Regulations & Certifications

To help you with compliance and reporting, we share information, best practices, and easy access to documentation. Our products regularly undergo independent verification of security, privacy, and compliance controls, achieving certifications against global standards to earn your trust. We’re constantly working to expand our coverage.

EU Data Protection Directive

Protecting EU citizens’ privacy and personal data.

Many of Google Cloud Platform’s business customers operate in Europe. These businesses often need to comply with the European Union’s Data Protection Directive (the ‘Directive’), which regulates the processing of personal data. The Directive specifies a number of requirements companies must meet around protecting personal data.

Google Cloud is committed to compliance with the EU General Data Protection Regulation (GDPR) across Google Cloud Platform services when the GDPR takes effect on 25 May 2018.

Commonly asked questions:

Does Google Cloud Platform offer EU Model Contract Clauses?

Yes, as of December 16, 2015, Google Cloud Platform offers EU model contract clauses for customers subject to the Directive. The European Union’s data protection authorities, acting collectively as the Article 29 Working Party, concluded that Google’s agreements for G Suite and Google Cloud Platform model contract clauses meet EU regulatory expectations. This confirms that Google Cloud services provide sufficient commitments to frame international data flows from Europe to the rest of the world. For details on the approval of the Google Cloud from the Article 29 Working Party, please see the respective decisions for G Suite and Google Cloud Platform. Customers can review and accept our Data Processing and Security Terms and Model Contract Clauses in the Google Cloud Console. Detailed instructions on how to take this action can be found here.

Can I designate where data will be stored?

We refer to the Google data centers in a particular location as a “Zone,” with multiple zones comprising a “Region.” Currently, Google Cloud Platform maintains regions around the globe, including Asia, Europe, and North America. Within currently available zones and the geographic scope of the services being used, customers may designate where certain customer data will be stored. In cases where no region is selected, or where a particular service does not support a particular location, Google will store and process data in other locations where it (or its agents) maintains or operates facilities. Data location options are clearly identified in the Google Cloud console, and Google observes the data location commitments set forth in the Google Cloud Platform Terms of Service and Service Specific Terms.

View Google Data Center locations