If the EU’s General Data Protection Regulation or equivalent legislation in Switzerland or the UK (collectively, the GDPR) applies to your GCP usage, and you have not previously accepted the MCCs in the Cloud Console, the updated DPST automatically deem the MCCs to apply.
What do I need to do?
No action is required on your part if:
The GDPR does not apply to your use of GCP, since these changes will then have no practical impact;
You have already accepted the MCCs in the Cloud Console, since they will continue to apply;
You are a GCP customer and your Google Cloud Platform agreement incorporates Google’s current DPST (for example, an offline Cloud Master Agreement or the online Google Cloud Platform Terms of Service); or
You are a GCP partner, since the updated Partner DPST will automatically apply.
Your Google Cloud Platform agreement does not incorporate the DPST.
We also recommend that, if you are a GCP partner whose customers are subject to the GDPR, and you have not yet entered into appropriate terms (for example, based on MCCs) with those customers to legitimize the transfer of their personal data in compliance with the GDPR, you consult with your legal advisors and consider doing so.
If you are not the right person to review the updated DPST or this notice, please forward this notice to the appropriate contact for your organization, such as your legal or compliance team.