In 2010, the European Commission approved model contract clauses as a means of complying with the requirements of the EU Data Protection Directive, which in May 2018, was replaced by the General Data Protection Regulation (GDPR). The effect of this decision is that, by incorporating certain provisions into a contract, personal data can flow in a compliant way from those subject to the Directive to cloud (and other) providers outside the EU or the European Economic Area ("EEA"). By adopting EU model contract clauses, providers outside the EU or the EEA can offer their customers an option for complying with the GDPR.
Google Cloud Platform gained confirmation of compliance from the European Union’s data protection authorities, acting collectively as the Article 29 Working Party, for our model contract clauses, affirming that our G Suite and Google Cloud Platform contractual commitments fully meet the requirements to legally frame transfers of data from the EU to the rest of the world, in accordance with the Data Protection Directive, which has now been replaced by the GDPR.
See Google Cloud Platform’s model contract clauses or find out how to opt in for Google Cloud Platform or G Suite.