Go to page

GDPR Resource Center

• Overview
• • Contracts & Terms
  • Compliance
  • Relevant Products
• GDPR and Google Cloud

Have you accepted our GDPR-updated Data Processing Amendment for Google Workspace and Data Processing and Security Terms for Google Cloud Platform? If not, read the instructions or watch this video for Google Workspace and read the instructions here for Google Cloud Platform.

Contracts & Terms

We’ve updated our data processing terms for GCP and Google Workspace for GDPR and our commitments for international data flows have been confirmed as compliant.

Terms of Service

GCP|Google Workspace

Data Processing Terms

GCP|Google Workspace

Model Contract Clauses

GCP|Google Workspace

Assessing Google Cloud based on Article 28

Article 28 of the GDPR lays out the requirements of a data processor who processes data on behalf of the data controller. See how our terms reflect these requirements.

Expand all

USE OF SUBPROCESSORS

GCP

Data Processing and Security Terms (DPST)

• Definitions|Section 2.1
• Data Security|Section 7.1.2
• Data Security|Section 7.3.1 (b)
• Data Transfers|Section 10.1
• Subprocessors|Section 11
• Third-Party Beneficiary|Section 14
• Appendix 2.1–2.5

EU Model Contract Clauses (MCC)

• Definitions|Clause 1
• Third-Party Beneficiary|Clause 3.3
• Obligations of the Data Exporter|Clause 4 (g) and (i)
• Obligations of the Data Importer|Clause 5 (i) and (j)
• Liability|Clause 6
• Cooperation with Supervisory Authorities|Clause 8
• Sub-Processing|Clause 11
• Termination |Clause 12
• Processing Operations|Appendix 1
• Subprocessor Security|Appendix 2.5

Related content

• GCP Subprocessors

Google Workspace

Data Processing Terms

• Definitions|Section 2.1
• Data Security|Section 7.1.2
• Data Security|Section 7.3.1 (b)
• Data Transfers|Section 10.1
• Subprocessors|Section 11
• Third-Party Beneficiary|Section 14
• Security Measures|Appendix 2.1–2.5

EU Model Contract Clauses (MCC)

• Definitions|Clause 1
• Third-Party Beneficiary|Clause 3.3
• Obligations of the Data Exporter|Clause 4 (g) and (i)
• Obligations of the Data Importer|Clause 5 (i) and (j)
• Liability|Clause 6
• Cooperation with Supervisory Authorities|Clause 8
• Sub-Processing|Clause 11
• Termination|Clause 12
• Processing Operations|Appendix 1
• Subprocessor Security|Appendix 2.5

Related content

• Google Workspace Subprocessors Agreement

GENERAL WRITTEN CONTRACT

GCP

Data Processing and Security Terms (DPST)

• Entire Data Processing and Security Terms

Google Workspace

Data Processing Terms

• Entire Data Processing Terms

PROCESSING UNDER DOCUMENTED INSTRUCTIONS

GCP

Data Processing and Security Terms (DPST)

• Processing of Data|Section 5.2

EU Model Contract Clauses (MCC)

• Obligations of the Data Importer|Clause 5 (a) and (b)

Google Workspace

Data Processing Terms

• Section 5.2|Processing of Data

EU Model Contract Clauses (MCC)

• Clause 5 (a) and (b)|Obligations of the Data Importer

PROCESSING UNDER CONFIDENTIALITY OBLIGATIONS

GCP

Google Cloud Platform Terms of Services

• Confidential Information|Section 7

Data Processing and Security Terms (DPST)

• Data Security|Section 7.1.2
• Data Security|Section 7.5.3
• Personnel Security|Appendix 2.4

EU Model Contract Clauses (MCC)

• Obligations of the Data Importer|Clause 5

Google Workspace

Google Workspace Agreement

• Confidential Information|Section 6

Data Processing Terms

• Data Security|Section 7.1.2
• Data Security|Section 7.5.3
• Personnel Security|Appendix 2.4

EU Model Contract Clauses (MCC)

• Obligations of the Data Importer|Clause 5

SECURITY MEASURES

GCP

Data Processing and Security Terms (DPST)

• Data Security|Section 7
• Security Measures|Appendix 2

EU Model Contract Clauses (MCC)

• Obligations of the Data Importer|Clause 5
• Appendix 2

Google Workspace

Data Processing Terms

• Data Security|Section 7
• Security Measures|Appendix 2

EU Model Contract Clauses (MCC)

• Obligations of the Data Importer|Clause 5
• Appendix 2

Related content

• Google Cloud Security & Compliance Whitepaper

ASSISTANCE TO DATA CONTROLLER

GCP

Data Processing and Security Terms (DPST)

• Impact Assessments and Consultations|Section 8

Google Workspace

Data Processing Terms

• Impact Assessments and Consultations|Section 8

DATA DELETION AND DATA RETURN

GCP

Data Processing and Security Terms (DPST)

• Data Deletion|Section 6
• Data Subject Rights; Data Export |Section 9.1

EU Model Contract Clauses (MCC)

• Processing Operations|Appendix 1

Google Workspace

Data Processing Terms

• Data Deletion|Section 6
• Data Subject Rights; Data Export|Section 9.1

EU Model Contract Clauses (MCC)

• Processing Operations|Appendix 1

DEMONSTRATE COMPLIANCE

GCP

Data Processing and Security Terms (DPST)

• Data Security|Section 7.4

Related content

• Google Cloud Compliance

Google Workspace

Data Processing Terms

• Data Security|Section 7.4

Related content

• Google Cloud Compliance

EU data protection authorities confirmed compliance of Google Cloud commitments for international data flows.

Read the blog