Snapshot 2243
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to Main Content AWS Security Blog AWS GDPR Data Processing Addendum – Now Part of Service Terms Today, we’re happy to announce that the AWS GDPR Data Processing Addendum(.pdf) is now part of our online Service Terms. This means all AWS customers globally can rely on the terms of the AWS GDPR DPA which will apply automatically from May 25, 2018, whenever they use AWS services to process personal data under the GDPR. The AWS GDPR DPA also includes EU Model Clauses, which were approved by the European Union (EU) data protection authorities, known as the Article 29 Working Party. This means that AWS customers wishing to transfer personal data from the European Economic Area (EEA) to other countries can do so with the knowledge that their personal data on AWS will be given the same high level of protection it receives in the EEA. As we approach the GDPR enforcement date this week, this announcement is an important GDPR compliance component for us, our customers, and our partners. All customers which that are using cloud services to process personal data will need to have a data processing agreement in place between them and their cloud services provider if they are to comply with GDPR. As early as April 2017, AWS announced that AWS had a GDPR-ready DPA available for its customers. In this way, we started offering our GDPR DPA to customers over a year before the May 25, 2018 enforcement date. Now, with the DPA terms included in our online service terms, there is no extra engagement needed by our customers and partners to be compliant with the GDPR requirement for data processing terms. The AWS GDPR DPA also provides our customers with a number of other important assurances, such as the following: AWS will process customer data only in accordance with customer instructions. AWS has implemented and will maintain robust technical and organizational measures for the AWS network. AWS will notify its customers of a security incident without undue delay after becoming aware of the security incident. AWS will make available certificates issued in relation to the ISO 27001 certification, the ISO 27017 certification, and the ISO 27018 certification to further help customers and partners in their own GDPR compliance activities. Customers who have already signed an offline version of the AWS GDPR DPA can continue to rely on that GDPR DPA. By incorporating our GDPR DPA into the AWS Service Terms, we are simply extending the terms of our GDPR DPA to all customers globally who will require it under GDPR. AWS GDPR DPA is only part of the story, however. We are continuing to work alongside our customers and partners to help them on their journey towards GDPR compliance. If you have any questions about the GDPR or the AWS GDPR DPA, please contact your account representative, or visit the AWS GDPR Center at: https://aws.amazon.com/compliance/gdpr-center/ Interested in AWS Security news? Follow the AWS Security Blog on Twitter. Loading comments… Resources AWS Cloud Security AWS Compliance AWS Security Reference Architecture Best Practices Data Protection at AWS Zero Trust on AWS Cryptographic Computing Follow Twitter Facebook LinkedIn Twitch Email Updates