Go to page

GDPR Resource Center

• Overview
• • Contracts & Terms
  • Compliance
  • Relevant Products
• GDPR and Google Cloud

Have you accepted our GDPR-updated Data Processing Amendment for G Suite and Data Processing and Security Terms for Google Cloud Platform? If not, read the instructions or watch this video for G Suite and read the instructions here for Google Cloud Platform.

Contracts & Terms

We’ve updated our data processing terms for GCP and G Suite for GDPR and our commitments for international data flows have been confirmed as compliant.

Terms of Service

GCP|G SUITE

Data Processing Terms

GCP|G SUITE

Model Contract Clauses

GCP|G SUITE

Assessing Google Cloud based on Article 28

Article 28 of the GDPR lays out the requirements of a data processor who processes data on behalf of the data controller. See how our terms reflect these requirements.

Expand all

USE OF SUBPROCESSORS

GCP

Data Processing and Security Terms (DPST)

• Definitions|Section 2.1
• Data Security|Section 7.1.2
• Data Security|Section 7.3.1 (b)
• Data Transfers|Section 10.1
• Subprocessors|Section 11
• Third-Party Beneficiary|Section 14
• Appendix 2.1–2.5

EU Model Contract Clauses (MCC)

• Definitions|Clause 1
• Third-Party Beneficiary|Clause 3.3
• Obligations of the Data Exporter|Clause 4 (g) and (i)
• Obligations of the Data Importer|Clause 5 (i) and (j)
• Liability|Clause 6
• Cooperation with Supervisory Authorities|Clause 8
• Sub-Processing|Clause 11
• Termination |Clause 12
• Processing Operations|Appendix 1
• Subprocessor Security|Appendix 2.5

Related content

• GCP Subprocessors

G Suite

Data Processing Terms

• Definitions|Section 2.1
• Data Security|Section 7.1.2
• Data Security|Section 7.3.1 (b)
• Data Transfers|Section 10.1
• Subprocessors|Section 11
• Third-Party Beneficiary|Section 14
• Security Measures|Appendix 2.1–2.5

EU Model Contract Clauses (MCC)

• Definitions|Clause 1
• Third-Party Beneficiary|Clause 3.3
• Obligations of the Data Exporter|Clause 4 (g) and (i)
• Obligations of the Data Importer|Clause 5 (i) and (j)
• Liability|Clause 6
• Cooperation with Supervisory Authorities|Clause 8
• Sub-Processing|Clause 11
• Termination|Clause 12
• Processing Operations|Appendix 1
• Subprocessor Security|Appendix 2.5

Related content

• G Suite Subprocessors Agreement

GENERAL WRITTEN CONTRACT

GCP

Data Processing and Security Terms (DPST)

• Entire Data Processing and Security Terms

G Suite

Data Processing Terms

• Entire Data Processing Terms

PROCESSING UNDER DOCUMENTED INSTRUCTIONS

GCP

Data Processing and Security Terms (DPST)

• Processing of Data|Section 5.2

EU Model Contract Clauses (MCC)

• Obligations of the Data Importer|Clause 5 (a) and (b)

G Suite

Data Processing Terms

• Section 5.2|Processing of Data

EU Model Contract Clauses (MCC)

• Clause 5 (a) and (b)|Obligations of the Data Importer

PROCESSING UNDER CONFIDENTIALITY OBLIGATIONS

GCP

Google Cloud Platform Terms of Services

• Confidential Information|Section 8

Data Processing and Security Terms (DPST)

• Data Security|Section 7.1.2
• Data Security|Section 7.5.3
• Personnel Security|Appendix 2.4

EU Model Contract Clauses (MCC)

• Obligations of the Data Importer|Clause 5

G Suite

G Suite Agreement

• Confidential Information|Section 6

Data Processing Terms

• Data Security|Section 7.1.2
• Data Security|Section 7.5.3
• Personnel Security|Appendix 2.4

EU Model Contract Clauses (MCC)

• Obligations of the Data Importer|Clause 5

SECURITY MEASURES

GCP

Data Processing and Security Terms (DPST)

• Data Security|Section 7
• Security Measures|Appendix 2

EU Model Contract Clauses (MCC)

• Obligations of the Data Importer|Clause 5
• Appendix 2

G Suite

Data Processing Terms

• Data Security|Section 7
• Security Measures|Appendix 2

EU Model Contract Clauses (MCC)

• Obligations of the Data Importer|Clause 5
• Appendix 2

Related content

• Google Cloud Security & Compliance Whitepaper

ASSISTANCE TO DATA CONTROLLER

GCP

Data Processing and Security Terms (DPST)

• Impact Assessments and Consultations|Section 8

G Suite

Data Processing Terms

• Impact Assessments and Consultations|Section 8

DATA DELETION AND DATA RETURN

GCP

Data Processing and Security Terms (DPST)

• Data Deletion|Section 6
• Data Subject Rights; Data Export |Section 9.1

EU Model Contract Clauses (MCC)

• Processing Operations|Appendix 1

G Suite

Data Processing Terms

• Data Deletion|Section 6
• Data Subject Rights; Data Export|Section 9.1

EU Model Contract Clauses (MCC)

• Processing Operations|Appendix 1

DEMONSTRATE COMPLIANCE

GCP

Data Processing and Security Terms (DPST)

• Data Security|Section 7.4

Related content

• Google Cloud Compliance

G Suite

Data Processing Terms

• Data Security|Section 7.4

Related content

• Google Cloud Compliance

EU data protection authorities confirmed compliance of Google Cloud commitments for international data flows.

Read the blog