Google announces Important updates about GDPR compliance and they say: Because of the recent Court of Justice of the European Union Judgment on Information transfers, invalidating the Privacy Shield, Google will be moving to Standard Contractual Clauses (SCCs) for transfers of Internet advertising and measurement Private Information out of the Europe Economic Area, Switzerland and the United Kingdom.
They are making these updates solely to address GDPR compliance. The updates do not give Google additional rights over data. If the Google Ads Data Processing Terms or Google Ads Controller-Controller Data Protection Terms are already part of your contract (or if you have separately accepted the Google Measurement Controller-Controller Data Protection Terms where available), the updates will apply from August 12, 2020.
For more information, please see this article that we will continue to update
The General Data Protection Regulation (GDPR) went into effect on May 25, 2018, replacing the 1995 EU Data Protection Directive. The GDPR lays out specific requirements for businesses and organizations who are established in Europe or who serve users in Europe. It regulates how businesses can collect, use, and store personal data.
We make available data processing conditions, symbolizing the controller-processor connection, where necessary, where we act as a processor of information. Products in which Google acts as a chip include:
The information processing conditions we provide for the Advertising products listed above can be found here. More information about the varieties of personal data in range for all those periods for every Ads product are available here. Info about Google Cloud Platform and G Suite responsibilities into the GDPR, including data processing terms, can be found here.
For products at which the customer each and Google act as controllers of personal data, we have upgraded our arrangements or made terms that signify that status. These Google products include:
Google Ads (including Shopping and Hotel Ads, but not Google Ads features in which we act as a processor of personal data – see above)
Google Ad Manager
Google Client Reviews
Google Maps APIs
Waze Audio SDK
The controller-controller conditions that we offer for the Ads products listed above can be found here. We’ve published additional information on the Help Center to deal with common questions: Ad Supervisor , AdSense, and AdMob.
We also offer European Model Contract Clauses to address demands that are EU for Google Cloud Platform and G Suite. We obtained Common Remarks from EU Data Protection Authorities confirming the alignment of our Model Contract Clauses with the Standard Contractual Clauses released by the European Commission.
Publishers and advertisers using our advertisements and dimension products internationally must comply with our EU User Consent Policy, and therefore are required to collect permission from EEA users for customized advertisements and utilization of cookies/local storage in their websites and apps. Therefore, if you’re advertiser or a publisher using Google advertising and measurement solutions, you ought to take steps to make sure users’ tastes are respected to meet the requirements of Policy.
The Privacy Shield frameworks provided a mechanism to comply with data protection requirements when shifting UK, EEA or Swiss personal information and onwards. Though the Swiss-U.S. Privacy Shield now stays valid, in light of the recent Court of Justice of the European Union ruling on information transports, invalidating the EU-U.S. Privacy Shield, Google will be moving to reliance on Standard Contractual Clauses for relevant data transfers, which, in accordance with the judgment, can continue to be valid legal mechanism to transfer data under the GDPR. We’ll share more information about those updates (including timelines) as soon as possible. Standard Contractual Clauses are offered as a transfer mechanism by Google Cloud.
If your existing contract doesn’t incorporate our Advertising data protection conditions, please examine the product-specific Support Center articles under”Useful links” for more information.
We are committed to having a lawful basis for data transfers in compliance with data protection laws that are applicable.
We are dedicated to having a lawful basis for data transfers in accordance with data protection laws, and will continue to track the growth of international data-transfer mechanisms beneath the GDPR.
Terms & policies:
Tools to help publishers comply with the GDPR:
Tools to help advertisers comply with the GDPR: