CINXE.COM
Data Protection Law Compliance - Business Data Responsibility
<!DOCTYPE html> <html lang="en"> <head> <meta content="width=device-width, minimum-scale=1, initial-scale=1" name="viewport"> <meta charset="utf-8"> <link href="https://fonts.googleapis.com/css?family=Google+Sans:400,500,700&display=swap&lang=en" rel="stylesheet" nonce="2Dc2EVtb0FjEhw-TH4bP5A"> <link href="/static/compiled/index.min.css?cache=0e10251" rel="stylesheet" nonce="2Dc2EVtb0FjEhw-TH4bP5A"> <link rel="apple-touch-icon-precomposed" sizes="180x180" href="/static/assets/img/favicon/apple-touch-icon.png"> <link rel="icon" type="image/png" sizes="32x32" href="/static/assets/img/favicon/favicon-32x32.png"> <link rel="icon" type="image/png" sizes="16x16" href="/static/assets/img/favicon/favicon-16x16.png"> <link rel="shortcut icon" href="/static/assets/img/favicon/favicon.ico"> <link href="https://www.gstatic.com/glue/cookienotificationbar/cookienotificationbar.min.css" rel="stylesheet" nonce="2Dc2EVtb0FjEhw-TH4bP5A"> <title>Data Protection Law Compliance - Business Data Responsibility</title> <link rel="canonical" href="https://business.safety.google/compliance/"> <meta name="description" content="Explore our tools and resources to learn more about data protection laws and find ways to improve your business compliance."> <meta property="og:description" content="Explore our tools and resources to learn more about data protection laws and find ways to improve your business compliance."> <meta name="twitter:description" content="Explore our tools and resources to learn more about data protection laws and find ways to improve your business compliance."> <meta property="og:url" class="meta-url" content="https://business.safety.google/compliance/"> <meta property="og:type" content="website"> <meta property="og:title" content="Data Protection Law Compliance - Business Data Responsibility"> <meta property="og:site_name" content="Business Data Responsibility"> <meta name="twitter:card" content="summary_large_image"> <meta name="twitter:url" class="meta-url" content="https://business.safety.google/compliance/"> <meta name="twitter:title" content="Data Protection Law Compliance - Business Data Responsibility"> <script nonce="2Dc2EVtb0FjEhw-TH4bP5A"> (function(i, s, o, g, r, a, m) { i['GoogleAnalyticsObject'] = r; i[r] = i[r] || function() { (i[r].q = i[r].q || []).push(arguments) }, i[r].l = 1 * new Date(); a = s.createElement(o), m = s.getElementsByTagName(o)[0]; a.async = 1; a.src = g; m.parentNode.insertBefore(a, m) })(window, document, 'script', '//www.google-analytics.com/analytics.js', 'ga'); ga('create', 'UA-49447312-51', 'auto'); ga('send', 'pageview'); </script> </head> <body class="glue-body page-body"> <header class="glue-header glue-header--single" id="glue-header"> <div id="glue-drawer" class="glue-header__bar glue-header__bar--desktop glue-header__drawer"> <div class="glue-header__tier desktop-header-container"> <div class="glue-header__container"> <div class="glue-header__lock-up"> <div class="glue-header__logo"> <a class="glue-header__logo-link" href="../" title="Google" aria-label="Google logo"> <div class="glue-header__logo-container"> <svg role="img" alt="" aria-hidden="true" class="glue-header__logo-svg"> <use xlink:href="/static/assets/img/glue-icons.svg#google-color-logo"></use> </svg> </div> <p class="glue-header__logo--product"> Business Data Responsibility </p> </a> </div> </div> </div> <div class="glue-header__container glue-header__container--flex-auto"> <nav class="glue-header__link-bar"> <ul class="glue-header__list glue-header__link-bar--arrow" id="list-1"> <p class="header-product">Business Data Responsibility</p> <li aria-level="1" class="glue-header__item"> <a class="glue-header__link" href="../" aria-label="Overview"> Overview </a> </li> <li aria-level="1" class="glue-header__item glue-header--is-active"> <a class="glue-header__link" href="../compliance/" aria-label="Compliance"> Compliance </a> </li> <li aria-level="1" class="glue-header__item"> <a class="glue-header__link" href="../product-controls/" aria-label="Product Controls"> Product Controls </a> </li> <li aria-level="1" class="glue-header__item"> <a class="glue-header__link" href="../data-safety/" aria-label="Data Safety"> Data Safety </a> <ul class="glue-header__list glue-header__list--nested" id="list-2"> <li aria-level="2" class="glue-header__item"> <a class="glue-header__link" href="../data-safety/marketers-and-publishers/" aria-label="For Marketers and Publishers"> For Marketers and Publishers </a> </li> <li aria-level="2" class="glue-header__item"> <a class="glue-header__link" href="../data-safety/built-in-security/" aria-label="Built-in Security"> Built-in Security </a> </li> <li aria-level="2" class="glue-header__item"> <a class="glue-header__link" href="../data-safety/security-and-privacy-all/" aria-label="Security and Privacy for all"> Security and Privacy for all </a> </li> </ul> </li> <li aria-level="1" class="glue-header__item"> <a class="glue-header__link" href="../responsible-innovation/" aria-label="Responsible Innovation"> Responsible Innovation </a> <ul class="glue-header__list glue-header__list--nested" id="list-2"> <li aria-level="2" class="glue-header__item"> <a class="glue-header__link" href="../responsible-innovation/safety-engineering-centre/" aria-label="Safety Engineering Center"> Safety Engineering Center </a> </li> </ul> </li> <li aria-level="1" class="glue-header__item"> <a class="glue-header__link" href="../resources/" aria-label="Resources"> Resources </a> </li> </ul> </nav> </div> <div class="glue-header__container glue-header__container--cta"> <div class="glue-header__cta"> <a class="glue-button glue-button--medium-emphasis" href="https://policies.google.com/privacy" aria-label="Privacy Policy" target="_blank" rel="noopener noreferrer"> Privacy Policy </a> </div> </div> </div> </div> <div class="glue-header__bar glue-header__bar--mobile"> <div class="glue-header__tier"> <div class="glue-header__container hide-desktop"> <div class="glue-header__lock-up"> <div class="glue-header__logo"> <a class="glue-header__logo-link" href="../" title="Google" aria-label="Google logo"> <div class="glue-header__logo-container"> <svg role="img" alt="" aria-hidden="true" class="glue-header__logo-svg"> <use xlink:href="/static/assets/img/glue-icons.svg#google-color-logo"></use> </svg> </div> </a> </div> </div> </div> <div class="glue-header__container"> <div class="glue-header__cta"> <div class="glue-header__hamburger"> <div class="glue-header__hamburger-wrapper"> <button aria-controls="glue-drawer" aria-expanded="false" aria-label="Open the navigation drawer" class="glue-header__drawer-toggle-btn" type="button"> <svg class="glue-icon glue-icon--24px" role="presentation"> <use xlink:href="/static/assets/img/glue-icons.svg#menu"></use> </svg> </button> </div> </div> <div class="glue-header__logo"> <a class="glue-header__logo-link" href="../" title="Business Data Responsibility" aria-label="Business Data Responsibility"> <div class="glue-header__logo-container hide-mobile"> <svg role="img" alt="" aria-hidden="true" class="glue-header__logo-svg"> <use xlink:href="/static/assets/img/glue-icons.svg#google-color-logo"></use> </svg> </div> <p class="glue-header__logo--product"> Business Data Responsibility </p> </a> </div> </div> </div> </div> </div> <div class="glue-header__drawer-backdrop"></div> </header> <main class="glue-page"> <div class="compliance-page glue-grid"> <div class="glue-grid__col glue-grid__col--span-12 headline"> <div class="glue-grid"> <div class="glue-grid__col glue-grid__col--span-4-sm glue-grid__col--span-12-md glue-grid__col--span-6-lg headline-order"> <h1 class="glue-headline glue-headline--headline-1 font-weight-medium has-blue-text-child-span"> <p>We are committed to complying with <em>applicable data protection laws</em></p> </h1> <p class="glue-body headline-description google-sans grey-700"> We are always working to stay compliant, which helps make compliance easier for your business. We are audited regularly by third parties, maintain certifications, provide industry-standard contractual protections and share tools and information you can use to strengthen your business’ compliance. </p> </div> <div class="glue-grid__col glue-grid__col--span-0-sm glue-grid__col--span-1-lg"> </div> <div class="glue-grid__col glue-grid__col--span-4-sm glue-grid__col--span-12-md glue-grid__col--span-5-lg image-flex"> <img alt="Blue Privacy Shield" class="compliance-hero-image small-width-image" src="https://lh3.googleusercontent.com/h-gDx4i99KEsdSSrjSmk5fGlwVfjTWgY3f89bghYP5rf7YknZkKYveEdvVU6VTwwDksmAC4g51YQyoV_15vYPD_QK7vgQyz_8GVhr9_NVPUgp48o84s"> </div> </div> </div> <div class="glue-grid__col glue-grid__col--span-12 glue-grid__col--span-12-md"> <div class="glue-grid compliance-accordion"> <div class="glue-grid__col glue-grid__col--span-4-sm glue-grid__col--span-12-md glue-grid__col--span-5-lg glue-grid__col--span-5-xl title"> <h2 class="glue-headline glue-headline--headline-2 has-blue-text-child-span"> <p>Our commitment to <em>user privacy</em></p> </h2> </div> <div class="glue-grid__col glue-grid__col--span-0-md glue-grid__col--span-1-lg glue-grid__col--span-1-xl hide-mobile"></div> <div class="glue-grid__col glue-grid__col--span-4-sm glue-grid__col--span-12-md glue-grid__col--span-6-lg glue-grid__col--span-6-xl flex-align-items-center"> <p class="glue-body google-sans grey-700 description"> Keeping users’ information safe, secure and private is among our highest priorities at Google. Over the years, we have worked closely with data protection authorities around the world and have implemented strong privacy protections that reflect their guidance. </p> </div> <div class="glue-grid__col glue-grid__col--span-4-sm glue-grid__col--span-12-md glue-grid__col--span-12-lg glue-grid__col--span-12-xl glue-mod-spacer-5-top google-sans grey-700"> <div class="glue-expansion-panels glue-is-collapsed" data-glue-expansion-panels-key="accordion-test"> <div class="glue-expansion-panels__header"> <h2 class="glue-eyebrow"></h2> <button aria-label="Press to toggle all panels" class="glue-expansion-panels-toggle-all glue-button glue-button--low-emphasis glue-button--icon-right hide-mobile" role="button" tabindex="0" aria-expanded="false"> <span aria-hidden="true" class="glue-expansion-panels__toggle-text glue-expansion-panels__toggle-text--expanded"> Expand all </span> <span aria-hidden="true" class="glue-expansion-panels__toggle-text glue-expansion-panels__toggle-text--collapsed"> Collapse all </span> <svg role="presentation" aria-hidden="true" class="glue-icon"> <use xlink:href="/static/assets/img/glue-icons.svg#expand-all"></use> </svg> </button> </div> <div class="glue-expansion-panel glue-is-collapsed" aria-expanded="false"> <div class="glue-expansion-panel-toggle" data-glue-expansion-panel-toggle-for="accordion-test-panel1" data-glue-expansion-panel-expand-tooltip="" data-glue-expansion-panel-collapse-tooltip="" aria-expanded="false" aria-controls="accordion-test-panel1" role="button" tabindex="0"> <h2 class="glue-expansion-panel__button-header">Robust safeguards</h2> <svg role="presentation" aria-hidden="true" class="glue-icon glue-expansion-panel__button-arrow"> <use xlink:href="/static/assets/img/glue-icons.svg#expand-more"></use> </svg> </div> <div class="glue-expansion-panel-content" data-glue-expansion-panel-initial="" id="accordion-test-panel1" aria-hidden="true"> <div> <p class="grey-700">We are well placed to meet the security requirements of the applicable data protection laws. Our services are backed by robust, state-of-the-art technical and organizational safeguards, dedicated security and privacy teams and our program is reviewed annually by third-party auditors.</p> </div> </div> </div> <div class="glue-expansion-panel glue-is-collapsed" aria-expanded="false"> <div class="glue-expansion-panel-toggle" data-glue-expansion-panel-toggle-for="accordion-test-panel2" data-glue-expansion-panel-expand-tooltip="" data-glue-expansion-panel-collapse-tooltip="" aria-expanded="false" aria-controls="accordion-test-panel2" role="button" tabindex="0"> <h2 class="glue-expansion-panel__button-header">Incident response</h2> <svg role="presentation" aria-hidden="true" class="glue-icon glue-expansion-panel__button-arrow"> <use xlink:href="/static/assets/img/glue-icons.svg#expand-more"></use> </svg> </div> <div class="glue-expansion-panel-content" data-glue-expansion-panel-initial="" id="accordion-test-panel2" aria-hidden="true"> <div> <p class="grey-700">We will promptly inform you of incidents involving your customer data in line with the data incident terms in our agreements with you. We maintain and continue to invest in advanced threat detection and avoidance technologies, as well as a rigorous 24/7 incident management program to help you identify and respond to security or privacy events without delay and with available information.</p> </div> </div> </div> <div class="glue-expansion-panel glue-is-collapsed" aria-expanded="false"> <div class="glue-expansion-panel-toggle" data-glue-expansion-panel-toggle-for="accordion-test-panel3" data-glue-expansion-panel-expand-tooltip="" data-glue-expansion-panel-collapse-tooltip="" aria-expanded="false" aria-controls="accordion-test-panel3" role="button" tabindex="0"> <h2 class="glue-expansion-panel__button-header">User transparency</h2> <svg role="presentation" aria-hidden="true" class="glue-icon glue-expansion-panel__button-arrow"> <use xlink:href="/static/assets/img/glue-icons.svg#expand-more"></use> </svg> </div> <div class="glue-expansion-panel-content" data-glue-expansion-panel-initial="" id="accordion-test-panel3" aria-hidden="true"> <div> <p class="grey-700">We provide transparency about how data is used in our ads products. We ask users for permission to use data to personalize ads and provide transparency into how the data is used in real time via the <a href="https://support.google.com/accounts/answer/1634057" rel="noopener noreferrer" target="_blank">“Why this ad” feature</a>. We provide detailed explanations on how we use data on <a href="https://safety.google/" rel="noopener noreferrer" target="_blank">safety.google.com</a> and in our <a href="https://policies.google.com/privacy" rel="noopener noreferrer" target="_blank">Privacy Policy</a>. We also provide transparency to users on what data Google saves about them in their Google Account, where users can view and manage their data, privacy, and security settings. Users can go to their <a href="https://adssettings.google.com/authenticated" rel="noopener noreferrer" target="_blank">Ad Settings</a> to control the use of data for ads personalization and for all ads shown by Google, including on our Google Marketing Platform products. As part of our continued commitment to give users controls to manage their privacy, we have updated our account creation experience to give users more options on what data they choose to save in their account.</p> </div> </div> </div> <div class="glue-expansion-panel glue-is-collapsed" aria-expanded="false"> <div class="glue-expansion-panel-toggle" data-glue-expansion-panel-toggle-for="accordion-test-panel4" data-glue-expansion-panel-expand-tooltip="" data-glue-expansion-panel-collapse-tooltip="" aria-expanded="false" aria-controls="accordion-test-panel4" role="button" tabindex="0"> <h2 class="glue-expansion-panel__button-header">Privacy practices</h2> <svg role="presentation" aria-hidden="true" class="glue-icon glue-expansion-panel__button-arrow"> <use xlink:href="/static/assets/img/glue-icons.svg#expand-more"></use> </svg> </div> <div class="glue-expansion-panel-content" data-glue-expansion-panel-initial="" id="accordion-test-panel4" aria-hidden="true"> <div> <p class="grey-700">We already have processes to build privacy into our products from the very earliest stages, and we are continually evolving our practices, including Data Protection Impact Assessments, to meet worldwide changing requirements including those in the GDPR around Privacy by Design and Privacy by Default.</p> </div> </div> </div> <div class="glue-expansion-panel glue-is-collapsed" aria-expanded="false"> <div class="glue-expansion-panel-toggle" data-glue-expansion-panel-toggle-for="accordion-test-panel5" data-glue-expansion-panel-expand-tooltip="" data-glue-expansion-panel-collapse-tooltip="" aria-expanded="false" aria-controls="accordion-test-panel5" role="button" tabindex="0"> <h2 class="glue-expansion-panel__button-header">Ads data retention policies</h2> <svg role="presentation" aria-hidden="true" class="glue-icon glue-expansion-panel__button-arrow"> <use xlink:href="/static/assets/img/glue-icons.svg#expand-more"></use> </svg> </div> <div class="glue-expansion-panel-content" data-glue-expansion-panel-initial="" id="accordion-test-panel5" aria-hidden="true"> <div> <p class="grey-700">We update our <a href="https://privacy.google.com/businesses/retention/" rel="noopener noreferrer" target="_blank">ads data retention policies</a> whenever necessary and have made changes to our products to unify retention practices.</p> </div> </div> </div> </div> </div> </div> </div> <div class="glue-grid__col glue-grid__col--span-12 headline-2 glue-grid__col--span-12-md"> <div class="glue-grid compliance-accordion"> <div class="glue-grid__col glue-grid__col--span-4-sm glue-grid__col--span-12-md glue-grid__col--span-5-lg glue-grid__col--span-5-xl title"> <h2 class="glue-headline glue-headline--headline-2 font-weight-medium has-blue-text-child-span"> <p>Digital Markets Act <em>Raising Issues with Public Authorities</em></p> </h2> </div> <div class="glue-grid__col glue-grid__col--span-0-md glue-grid__col--span-1-lg glue-grid__col--span-1-xl hide-mobile"></div> <div class="glue-grid__col glue-grid__col--span-4-sm glue-grid__col--span-12-md glue-grid__col--span-6-lg glue-grid__col--span-6-xl flex-align-items-center"> <p class="glue-body google-sans grey-700 description"> Google does not interpret any provisions, including confidentiality provisions, in its contracts or terms of service that are in scope of the Digital Markets Act, as preventing counterparties from raising any issue of non-compliance with the law or with any relevant public authority. This is without prejudice to the operation of lawful complaints-handling mechanisms that are laid down in agreements with business users, as defined by the Digital Markets Act. </p> </div> </div> <div class="glue-grid__col glue-grid__col--span-4-sm glue-mod-text-center glue-grid__col--span-12-md headline-2"> <h2 class="glue-headline glue-headline--headline-2 font-weight-medium has-blue-text-child-span"> Our commitment to data protection laws </h2> </div> <div class="glue-grid__col glue-grid__col--span-0-sm glue-grid__col--span-1-md"> </div> <div class="glue-grid__col glue-grid__col--span-4-sm glue-grid__col--span-10-md headline-description-2"> <p class="glue-body grey-700 subtitle glue-mod-text-center"> Privacy regulation is changing. We know you need to select products that are both compliant with all applicable data protection laws, and use personal data in ways that are compliant. Learn more about how Google is complying with specific privacy laws below. </p> </div> <div class="glue-grid__col glue-grid__col--span-12 glue-grid__col--span-12-md"> <div class="blue-box--dark compliance-carousel-box" id="compliance-carousel"> <div class="b2b-carousel carousel" data-b2b-carousel> <div class="carousel-track track" data-b2b-carousel-track id="compliance-carousel-track"> <a class="glue-card compliance-carousel-slide" data-b2b-carousel-item href="../gdpr/" id="compliance-carousel-1"> <div class="glue-card__inner"> <img alt class="image" src="/static/assets/img/flags/eu.svg"> <div class="glue-card__content content-section"> <p class="glue-headline glue-headline--headline-5 heading-datacard"> GDPR </p> <p class="glue-body data-cards"> The General Data Protection Regulation (GDPR) went into effect May 25, 2018. </p> </div> <div class="glue-card__cta glue-card__cta--arrow"> <span class="glue-button glue-button--low-emphasis glue-button--icon"> <svg aria-hidden="true" class="glue-icon glue-icon--arrow-forward" role="presentation"> <use xlink:href="/static/assets/img/glue-icons.svg#arrow-forward"></use> </svg> </span> </div> </div> </a><a class="glue-card compliance-carousel-slide" data-b2b-carousel-item href="../lgpd/" id="compliance-carousel-2"> <div class="glue-card__inner"> <img alt class="image" src="/static/assets/img/flags/brazil.svg"> <div class="glue-card__content content-section"> <p class="glue-headline glue-headline--headline-5 heading-datacard"> LGPD </p> <p class="glue-body data-cards"> The Lei Geral de Proteção de Dados (LGPD) went into effect September 18, 2020. </p> </div> <div class="glue-card__cta glue-card__cta--arrow"> <span class="glue-button glue-button--low-emphasis glue-button--icon"> <svg aria-hidden="true" class="glue-icon glue-icon--arrow-forward" role="presentation"> <use xlink:href="/static/assets/img/glue-icons.svg#arrow-forward"></use> </svg> </span> </div> </div> </a><a class="glue-card compliance-carousel-slide" data-b2b-carousel-item href="../usaprivacy/" id="compliance-carousel-3"> <div class="glue-card__inner"> <img alt class="image" src="/static/assets/img/flags/usa.svg"> <div class="glue-card__content content-section"> <p class="glue-headline glue-headline--headline-5 heading-datacard"> US state privacy laws </p> <p class="glue-body data-cards"> Individual states have enacted data protection laws. </p> </div> <div class="glue-card__cta glue-card__cta--arrow"> <span class="glue-button glue-button--low-emphasis glue-button--icon"> <svg aria-hidden="true" class="glue-icon glue-icon--arrow-forward" role="presentation"> <use xlink:href="/static/assets/img/glue-icons.svg#arrow-forward"></use> </svg> </span> </div> </div> </a> </div> </div> <button aria-label="Go to the previous slide" class="b2b-carousel-button b2b-carousel-button--left" data-b2b-carousel-button-left> <svg class="glue-icon glue-icon--32px" role="presentation"> <use xlink:href="/static/assets/img/glue-icons.svg#chevron-left"></use> </svg> </button> <button aria-label="Go to the next slide" class="b2b-carousel-button b2b-carousel-button--right" data-b2b-carousel-button-right> <svg class="glue-icon glue-icon--32px" role="presentation"> <use xlink:href="/static/assets/img/glue-icons.svg#chevron-right"></use> </svg> </button> </div> </div> <div class="glue-grid__col glue-grid__col--span-12 headline-2"> <div class="glue-grid"> <div class="glue-grid__col glue-grid__col--span-4-sm glue-grid__col--span-12-md glue-grid__col--span-6-lg headline-order"> <h2 class="glue-headline glue-headline--headline-2 font-weight-medium has-blue-text-child-span"> Audits and certifications </h2> <p class="glue-body headline-description google-sans grey-700 audit-copy"> Any data you share with Google is protected. Our products’ security controls are regularly audited in line with international standards to ensure all personal information is handled safely and responsibly. In addition, the effectiveness of our controls is reviewed by an independent third party every two years, at least. </p> </div> <div class="glue-grid__col glue-grid__col--span-0-sm glue-grid__col--span-1-lg"> </div> <div class="glue-grid__col glue-grid__col--span-4-sm glue-grid__col--span-12-md glue-grid__col--span-5-lg image-flex"> <img src="https://lh3.googleusercontent.com/oP9rg-gCn4eifv6gjtAFPz5NKNZ7ehKGKWlA7zA-kUM92XlJRvh1oal06Bh7J-pEbbJWo9wSUQ85QR5eFI59mVW4x9hNCKMAAh69Cn7cuTJQ0KIkSTk" class="audit-image small-width-image" alt="Blue shield showing Safer with Google" loading="lazy"> </div> </div> </div> <div class="glue-grid__col glue-grid__col--span-12 resources"> <div class="glue-grid compliance-resources"> <div class="glue-grid__col glue-grid__col--span-4 glue-grid__col--span-6-md glue-grid__col--span-12-sm glue-mod-spacer-5-bottom"> <div class="text-col-widget"> <h2 class="lead glue-headline glue-headline--headline-5">ISO 27001 (Information security management)</h2> <p class="description glue-mod-spacer-3-top">ISO 27001 is one of the most widely recognized, internationally accepted independent security standards. Google has earned ISO 27001 certification for the systems, applications, people, technology, processes, and data centers serving Google Cloud Platform, Google Workspace and Google Ads.</p> <div class="ctas"> <a class="glue-button glue-button-low-emphasis cta-link" href="/static/assets/pdf/may-2024-google-isms-27001-ads.pdf"> <span> Google Ads (PDF) </span> <svg class="glue-icon cta-icon" role="img" alt="Open Google Ads (PDF)"> <use xlink:href="/static/assets/img/glue-icons.svg#arrow-forward"> </svg> </a> </div> </div> </div> <div class="glue-grid__col glue-grid__col--span-4 glue-grid__col--span-6-md glue-grid__col--span-12-sm glue-mod-spacer-5-bottom"> <div class="text-col-widget"> <h2 class="lead glue-headline glue-headline--headline-5">ISO 27017 (Cloud security)</h2> <p class="description glue-mod-spacer-3-top">ISO 27017 is an international standard of practice for information security controls based on ISO/IEC 27002, specifically for cloud services. Google has been certified compliant with ISO 27017 for Google Cloud Platform products and Google Workspace.</p> <div class="ctas"> </div> </div> </div> <div class="glue-grid__col glue-grid__col--span-4 glue-grid__col--span-6-md glue-grid__col--span-12-sm glue-mod-spacer-5-bottom"> <div class="text-col-widget"> <h2 class="lead glue-headline glue-headline--headline-5">ISO 27018 (Cloud privacy)</h2> <p class="description glue-mod-spacer-3-top">ISO 27018 is an international standard of practice for protection of personally identifiable information (PII) in public cloud services. Google has been certified compliant with ISO 27018 for Google Cloud Platform products and Google Workspace.</p> <div class="ctas"> </div> </div> </div> <div class="glue-grid__col glue-grid__col--span-4 glue-grid__col--span-6-md glue-grid__col--span-12-sm glue-mod-spacer-5-bottom"> <div class="text-col-widget"> <h2 class="lead glue-headline glue-headline--headline-5">ISO 27701 (Privacy information management)</h2> <p class="description glue-mod-spacer-3-top">ISO/IEC 27701 is a global privacy standard that focuses on the collection and processing of personally identifiable information (PII). Google has been certified under ISO 27701 for Google Cloud Platform and Google Workspace.</p> <div class="ctas"> </div> </div> </div> <div class="glue-grid__col glue-grid__col--span-4 glue-grid__col--span-6-md glue-grid__col--span-12-sm glue-mod-spacer-5-bottom"> <div class="text-col-widget"> <h2 class="lead glue-headline glue-headline--headline-5">SSAE16/ISAE 3402</h2> <p class="description glue-mod-spacer-3-top">The American Institute of Certified Public Accountants (AICPA) SOC 2 (Service Organization Controls) and SOC 3 audit framework defines Trust Services Criteria for security, availability, processing integrity, privacy and confidentiality. Google has both SOC 2 and SOC 3 reports for Google Cloud Platform and Google Workspace. You can download our SOC 3 report. We also have SOC 1 Type 2 for AdWords, AdSense, Google Cloud Platform, Google Workspace, DoubleClick Campaign Manager, DoubleClick for Publishers, and DoubleClick Ad Exchange, available to customers under NDA.</p> <div class="ctas"> </div> </div> </div> <div class="glue-grid__col glue-grid__col--span-4 glue-grid__col--span-6-md glue-grid__col--span-12-sm glue-mod-spacer-5-bottom"> <div class="text-col-widget"> <h2 class="lead glue-headline glue-headline--headline-5">FedRAMP</h2> <p class="description glue-mod-spacer-3-top">FedRAMP is a program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services used by the U.S. federal government. Google maintains a FedRAMP Authorization to Operate (ATO) for Google Workspace and Google Cloud Platform.</p> <div class="ctas"> <a class="glue-button glue-button-low-emphasis cta-link" href="https://marketplace.fedramp.gov/index.html#!/products?sort=productName" target="_blank" rel="noopener noreferrer"> <span> FedRAMP </span> <svg class="glue-icon cta-icon" role="img" alt="Open FedRAMP link in new tab"> <use xlink:href="/static/assets/img/glue-icons.svg#open-in-new"> </svg> </a> </div> </div> </div> <div class="glue-grid__col glue-grid__col--span-4 glue-grid__col--span-6-md glue-grid__col--span-12-sm glue-mod-spacer-5-bottom"> <div class="text-col-widget"> <h2 class="lead glue-headline glue-headline--headline-5">PCI DSS (Payment Card Industry Data Security Standard)</h2> <p class="description glue-mod-spacer-3-top">The Payment Card Industry Data Security Standard (PCI DSS) is a set of technical and operational requirements for entities that store, process, or transmit payment card data. The following Google services have been reviewed by an independent Qualified Security Assessor and determined to be compliant with the current version of PCI DSS: Android Pay, Google Cloud Platform.</p> <div class="ctas"> <a class="glue-button glue-button-low-emphasis cta-link" href="https://cloud.google.com/security/compliance/pci-dss" target="_blank" rel="noopener noreferrer"> <span> PCI DSS </span> <svg class="glue-icon cta-icon" role="img" alt="Open PCI DSS link in new tab"> <use xlink:href="/static/assets/img/glue-icons.svg#open-in-new"> </svg> </a> </div> </div> </div> </div> </div> </div> </main> <aside> <div class="blue-box-endcap"> <div class="glue-page"> <div class="glue-grid"> <div class="glue-grid__col glue-grid__col--span-4-md glue-grid__col--span-4-lg glue-grid__col--span-4-xl hide-mobile"> </div> <div class="glue-grid__col glue-grid__col--span-12 glue-grid__col--span-4-md glue-grid__col--span-4-lg glue-grid__col--span-4-xl glue-mod-text-center glue-mod-spacer-5-bottom"> <img alt="Blue shield showing Safer with Google" class="headline-image" src="https://lh3.googleusercontent.com/rUgbTmlG_0kyr_uIvq1EnYfECMA-Jrhtv9wcI2XAy8aqftNguPWBgXQFesZOBs00SQsCEdH1SxLSF0wezaXHFwv-RzcAjn_txaMxPEvZiish6CtRmR0" loading="lazy"> <h2 class="glue-headline glue-headline--headline-4 title"> Explore more ways we keep you safe online </h2> </div> </div> <div class="endcap-cards hide-mobile"> <div class="endcap-card"> <a class="glue-card" href="../product-controls/"> <div class="glue-card__inner"> <div class="glue-card__content"> <p class="glue-headline glue-headline--headline-5 card-title glue-mod-font-weight-medium"> Product Controls </p> <p class="glue-body">Choose what information you share with Google based on products and features you use</p> </div> <div class="glue-card__cta glue-card__cta--arrow"> <span class="glue-button glue-button--low-emphasis glue-button--icon"> <svg aria-hidden="true" class="glue-icon glue-icon--arrow-forward" role="presentation"> <use xlink:href="/static/assets/img/glue-icons.svg#arrow-forward"> </svg> </span> </div> </div> </a> </div> <div class="endcap-card"> <a class="glue-card" href="../data-safety/"> <div class="glue-card__inner"> <div class="glue-card__content"> <p class="glue-headline glue-headline--headline-5 card-title glue-mod-font-weight-medium"> Data Safety </p> <p class="glue-body">Learn how we protect by investing in security and privacy technology - for every business including our own</p> </div> <div class="glue-card__cta glue-card__cta--arrow"> <span class="glue-button glue-button--low-emphasis glue-button--icon"> <svg aria-hidden="true" class="glue-icon glue-icon--arrow-forward" role="presentation"> <use xlink:href="/static/assets/img/glue-icons.svg#arrow-forward"> </svg> </span> </div> </div> </a> </div> <div class="endcap-card"> <a class="glue-card" href="../responsible-innovation/"> <div class="glue-card__inner"> <div class="glue-card__content"> <p class="glue-headline glue-headline--headline-5 card-title glue-mod-font-weight-medium"> Responsible Innovation </p> <p class="glue-body">Learn how we create and share safety technologies that raise industry standards for everyone.</p> </div> <div class="glue-card__cta glue-card__cta--arrow"> <span class="glue-button glue-button--low-emphasis glue-button--icon"> <svg aria-hidden="true" class="glue-icon glue-icon--arrow-forward" role="presentation"> <use xlink:href="/static/assets/img/glue-icons.svg#arrow-forward"> </svg> </span> </div> </div> </a> </div> </div> <div class="glue-grid__col glue-grid__col--span-12 mobile-carousel blue-box-desktop-hide"> <div class="glue-carousel" id="glue-carousel"> <div class="glue-carousel__viewport"> <div class="glue-carousel__list"> <div class="glue-carousel__item"> <a class="glue-card" href="../product-controls/"> <div class="glue-card__inner"> <div class="glue-card__content"> <p class="glue-headline glue-headline--headline-5"> Product Controls </p> <p class="glue-body">Choose what information you share with Google based on products and features you use</p> </div> <div class="glue-card__cta glue-card__cta--arrow"> <span class="glue-button glue-button--low-emphasis glue-button--icon"> <svg aria-hidden="true" class="glue-icon glue-icon--arrow-forward" role="presentation"> <use xlink:href="/static/assets/img/glue-icons.svg#arrow-forward"> </svg> </span> </div> </div> </a> </div> <div class="glue-carousel__item"> <a class="glue-card" href="../data-safety/"> <div class="glue-card__inner"> <div class="glue-card__content"> <p class="glue-headline glue-headline--headline-5"> Data Safety </p> <p class="glue-body">Learn how we protect by investing in security and privacy technology - for every business including our own</p> </div> <div class="glue-card__cta glue-card__cta--arrow"> <span class="glue-button glue-button--low-emphasis glue-button--icon"> <svg aria-hidden="true" class="glue-icon glue-icon--arrow-forward" role="presentation"> <use xlink:href="/static/assets/img/glue-icons.svg#arrow-forward"> </svg> </span> </div> </div> </a> </div> <div class="glue-carousel__item"> <a class="glue-card" href="../responsible-innovation/"> <div class="glue-card__inner"> <div class="glue-card__content"> <p class="glue-headline glue-headline--headline-5"> Responsible Innovation </p> <p class="glue-body">Learn how we create and share safety technologies that raise industry standards for everyone.</p> </div> <div class="glue-card__cta glue-card__cta--arrow"> <span class="glue-button glue-button--low-emphasis glue-button--icon"> <svg aria-hidden="true" class="glue-icon glue-icon--arrow-forward" role="presentation"> <use xlink:href="/static/assets/img/glue-icons.svg#arrow-forward"> </svg> </span> </div> </div> </a> </div> </div> </div> <button aria-label="Previous" class="glue-carousel__button glue-carousel__button--prev"> <svg class="glue-icon glue-icon--32px" role="presentation"> <use xlink:href="/static/assets/img/glue-icons.svg#chevron-left"> </svg> </button> <button aria-label="Next" class="glue-carousel__button glue-carousel__button--next"> <svg class="glue-icon glue-icon--32px" role="presentation"> <use xlink:href="/static/assets/img/glue-icons.svg#chevron-right"> </svg> </button> <ul aria-label="Choose slide to display" class="glue-carousel__navigation"> </ul> </div> </div> </div> </div> </aside> <footer class="glue-footer"> <h2 class="glue-mod-visually-hidden">Footer links</h2> <section class="glue-footer__global"> <div class="glue-footer__logo"> <a class="false" href="https://www.google.com" rel="noopener noreferrer" target="_blank" title="Google"> <svg aria-hidden="true" class="glue-footer__logo-img" role="presentation"> <use xlink:href="/static/assets/img/glue-icons.svg#google-solid-logo"></use> </svg> </a> </div> <ul class="glue-footer__global-links glue-no-bullet" role="list"> <li class="glue-footer__global-links-list-item"> <a class="glue-footer__link" href="https://about.google/" aria-label="About Google" rel="noopener noreferrer" target="_blank"> About Google </a> </li> <li class="glue-footer__global-links-list-item"> <a class="glue-footer__link" href="https://about.google/products/" aria-label="Google Products" rel="noopener noreferrer" target="_blank"> Google Products </a> </li> <li class="glue-footer__global-links-list-item"> <a class="glue-footer__link" href="https://policies.google.com/privacy" aria-label="Privacy" rel="noopener noreferrer" target="_blank"> Privacy </a> </li> <li class="glue-footer__global-links-list-item"> <a class="glue-footer__link" href="https://policies.google.com/terms" aria-label="Terms" rel="noopener noreferrer" target="_blank"> Terms </a> </li> </ul> <ul class="glue-footer__global-links glue-footer__global-links--extra glue-no-bullet" role="list"> <li class="glue-footer__global-links-list-item glue-footer__global-links-list-item--extra"> <a class="glue-footer__link false" href="https://support.google.com/" target="_blank" rel="noopener noreferrer"> <svg aria-hidden="true" class="glue-icon glue-icon--24px glue-icon--footer-help" role="img" alt=""> <use xlink:href="/static/assets/img/glue-icons.svg#help"></use> </svg> Help </a> </li> <li class="glue-footer__global-links-list-item glue-footer__global-links-list-item--extra"> <select aria-label="Change Language" name="lang-selector" id="lang-selector" class="glue-form__dropdown glue-footer__lang-dropdown"> <option value="/compliance/" selected>English</option> <option value="/intl/de/compliance/">Deutsch</option> <option value="/intl/es/compliance/">Español</option> <option value="/intl/fr/compliance/">Français</option> <option value="/intl/it/compliance/">Italiano</option> <option value="/intl/ja/compliance/">日本語</option> <option value="/intl/nl/compliance/">Nederlands</option> <option value="/intl/pt-BR/compliance/">Português (Brasil)</option> </select> </li> </ul> </section> </footer> <script src="/static/compiled/index.min.js?cache=0f654b5" nonce="2Dc2EVtb0FjEhw-TH4bP5A"></script> <script src="https://www.gstatic.com/glue/cookienotificationbar/cookienotificationbar.min.js" data-glue-cookie-notification-bar-category="2B" data-glue-cookie-notification-bar-language="en" data-glue-cookie-notification-bar-site-id="business.safety.google" nonce="2Dc2EVtb0FjEhw-TH4bP5A"> </script> </body> </html>