For Information if you are customers using Google Workspace. No Action is needed.
From a Google email:
We’re writing to let you know that on August 14, 2023, we updated our Cloud Data Processing Addendum (CDPA) and Google Workspace Service Specific Terms.
We’re also informing you that, if the EU GDPR applies to transfers of your customer data to the United States, we’ll be adopting the EU-U.S. Data Privacy Framework (DPF) as an Alternative Transfer Solution (as defined by the CDPA) for those transfers on September 1, 2023, in accordance with the CDPA. This follows the European Commission’s adoption of an adequacy decision for that framework.
What do the contract updates mean for my organization?
We updated our Cloud Data Processing Addendum to better support customers’ compliance needs and provide more transparency. As part of the update, we’re introducing two new appendices:
- Appendix 3: Specific Privacy Laws
- Appendix 4: Specific Products
The changes expand the application of certain commitments under the CDPA to a wider customer base, without reducing Google’s previous CDPA commitments. For example, we’re extending certain commitments that Google previously gave only to customers subject to European data protection legislation, so that they now benefit customers subject to other privacy laws (such as the California Consumer Privacy Act). We’re also consolidating certain existing product-specific privacy and security terms into the new Appendix 4.
In parallel, we updated our Google Workspace Service Specific Terms to reduce duplicative and outdated language, as part of an initiative to simplify and standardize the terms applicable to specific Google Workspace services. We also added a new Section 12 of the Service Specific Terms to support our Duet AI in Google Workspace offering.
No changes have been made to any existing commitment or obligations that would have a materially adverse impact on your organization’s rights or its use of the Services.
What do I need to do?
You should review the updated terms, but otherwise no action is required from you in relation to our contract updates. If the CDPA and Google Workspace Service Specific Terms are already a part of your contract(s), these updated terms (as applicable) will automatically apply as of September 14, 2023.
You can also see how our terms have changed over time by reviewing the available previous versions at the bottom of the applicable terms pages.
Similarly, Google’s adoption of the EU-U.S. DPF as an Alternative Transfer Solution does not require any action by you. But please remember that, if your billing address is outside EMEA and European data protection law applies to your use of Google Workspace, you should continue to follow these instructions to certify that such law applies, and provide details of your supervisory authority.
We’re here to help
If you have any questions or require assistance, please refer to the Google Workspace Help Center or Cloud Identity Help Center for more information.
Thanks for choosing Google Workspace or Cloud Identity.
—The Google Workspace and Cloud Identity Teams