Google - Data Processing Amendment - Do we need to do this?

[TwistedHelixis]

Just had the following email from Google, I assume I do need to do this but just wanted to double check (UK)

 

We are writing to inform you that we have updated the Data Processing Amendment (“DPA”) for Workspace (including Workspace for Education) and Cloud Identity services (the “Services”) to reflect the new versions of Standard Contractual Clauses (“SCCs”) approved by the European Commission on June 4, 2021. The new SCCs replace the clauses previously approved under Directive 95/46/EC.

 

What do I need to do?

 

You don’t need to do anything if:

 

you are located in Europe, the Middle East or Africa (“EMEA”) and your Workspace or Cloud Identity agreement incorporates the updated DPA; oryou are located outside EMEA and none of the EU GDPR, UK GDPR or Swiss Federal Data Protection Act (together, “European Data Protection Law”) applies to your use of the Services.Otherwise:

 

if your Workspace or Cloud Identity agreement does not incorporate the updated DPA, you need to click-to-accept the updated DPA by following these instructions immediately; andif you are located outside EMEA and European Data Protection Law applies to your use of the Services (e.g. because you use the Services to process personal data relating to EEA, UK or Swiss residents), you need to follow these instructions by October 27, 2021, in order to:certify that European Data Protection Law applies to your use of the Services (to ensure the appropriate new SCCs apply to your use of the Services); andprovide details of your supervisory authority. Please also add details of your representative and/or data protection officer (as applicable), if you haven’t already.

[LeMarchand]

I was off last week and only just cleared my mail; came on to ask the same thing.

 

As no replies...

 

[Koldov]

Going to give this a quick bump as well, scrolling through the settings of our Google Workspace admin console and came across this...

 

Should I have done something here?

 

[TwistedHelixis]

There is also a section further up the page that probably needs completing.

 

As I didn't get any reply last week, I went ahead and completed the first two setions 'data processing' & 'EU data law', plus the section further up the page.

 

Might be best for you to see if anyone replies with a firm yes or no before doing what I have done.

[Koldov]

Can anyone see from the screenshot if our "Workspace or Cloud Identity agreement incorporates the updated DPA"...?

 

There is also a section further up the page that probably needs completing.

 

Yeah, actually I think I'm going to find someone who is paid way more than me to fill all that in...