California Requirements

Last modified: November 12, 2020

The California Consumer Privacy Act (CCPA) requires specific disclosures for California residents.

This Privacy Notice is designed to help you understand how Google handles your information:

  • We explain the categories of information Google collects and the sources of that information in Information We Collect.

  • We explain how Google uses information in Why We Process Data.

  • We explain when Google may share information in How We Share Data. Google does not sell your personal information.

The CCPA also provides the right to request information about how Google collects, uses, and discloses your personal information. And it gives you the right to access your information and request that Google delete that information. Finally, the CCPA provides the right to not be discriminated against for exercising your privacy rights.

We provide the information and tools described in this Notice so you can exercise these rights. When you use them, we’ll validate your request by verifying your identity (for example, by confirming that you’re signed in to your Google Account). If you have questions or requests related to your rights under the CCPA, you (or your authorized agent) can also contact Google.

The CCPA requires a description of data practices using specific categories. This table uses these categories to organize the information in this Privacy Notice.

Categories of personal information we collect Business purposes for which information may be used or disclosed Parties with whom information may be shared

Service Data is the personal information Google collects or generates during the provision and administration of the Cloud Services, excluding any Customer Data and Partner Data. Service Data includes:

Identifiers such as your name, phone number, and address, as well as unique identifiers tied to the browser, application, or device you’re using.

Demographic information, such as your preferred language.

Commercial information such as records of charges, payments, and billing details and issues.

Internet, network, and other activity information such as device identifiers, identifiers from cookies or tokens, IP addresses, and information about usage, operational status, software errors and crash reports, authentication credentials, quality and performance metrics, and other technical details necessary for us to operate and maintain Cloud Services and related software.

Geolocation data, such as the country you’re in, as may be determined by GPS or IP address, depending in part on your device and account settings.

Audio, electronic, visual and similar information, such as audio recordings of your calls with our technical support providers.

Inferences drawn from the above, like aggregated performance metrics for a new product feature to determine product strategy.

Google processes Service Data for the following purposes:

Protecting against security threats, abuse, and illegal activity. Google uses and may disclose Service Data to detect, prevent and respond to security incidents, and for protecting against other malicious, deceptive, fraudulent, or illegal activity. For example, to protect our services, Google may receive or disclose information about IP addresses that malicious actors have compromised.

Auditing and measurement. Google uses Service Data for analytics and measurement to understand how our services are used, and to provide you and our customers with recommendations and tips.

Maintaining our services. Google uses Service Data to provide Cloud Services, technical support, and other services you request, and ensure they are working as intended, for example by tracking outages or troubleshooting bugs and other issues that you report to us.

Product development. Google uses Service Data to improve Cloud Services and other services you request, and to develop new features and technologies that benefit our users and customers.

Use of service providers. Google shares Service Data with service providers to perform services on our behalf, in compliance with this Privacy Notice and other appropriate confidentiality and security measures. For example, we may rely on service providers to help provide technical support.

Legal reasons. Google also uses Service Data to satisfy applicable laws or regulations, and discloses information in response to legal process or enforceable government requests, including to law enforcement. We provide information about the number and type of requests we receive from governments in our Transparency Report.

We do not share Service Data with companies, organizations, or individuals outside of Google except in the following cases:

With your consent. We’ll share Service Data outside of Google when we have your consent. For example, when you or our customer chooses to procure a third-party service through the Google Cloud Platform Marketplace or Google Workspace Marketplace, or use a third-party application that requests access to your information, we’ll seek permission to share information with that third party.

With your administrators and authorized resellers. When you use Cloud Services, your administrator and resellers authorized to manage your or your organization’s account will have access to certain Service Data. For example, they may be able to:

  • View account and billing information, activity and statistics

  • Change your account password

  • Suspend or terminate your account access

  • Access your account information in order to satisfy applicable law, regulation, legal process, or enforceable governmental request

  • Restrict your ability to delete or edit your information or your privacy settings

For external processing. We provide information to our affiliates, partners and other trusted businesses or persons to process it for us, based on our instructions and in compliance with this Privacy Notice and other appropriate confidentiality and security measures.

For legal reasons. We may share Service Data outside of Google if we have a good-faith belief that access, use, preservation, or disclosure of the information is reasonably necessary to:

  • Comply with applicable law, regulation, legal process, or enforceable governmental request. We share information about the number and type of requests we receive from governments in our Transparency Report.

  • Enforce applicable agreements, including investigation of potential violations.

  • Detect, prevent, or otherwise address fraud, security, or technical issues.

  • Protect against harm to the rights, property or safety of Google, our customers, users, and the public as required or permitted by law.

For complete Google Cloud Privacy Notice, see here.