If for your job you use any Google services, chances are you are sending them a lot of personal data of your clients in emails, documents, etc. So technically you are the controller, and Google becomes one of your processors. Is Google's current privacy policy compliant with GDPR and also valid as the data processing agreement (DPA) between a controller (you) and a processor (them)? If not, then I guess it's illegal to use Google's services for professional purposes. If it is compliant, then I'd like to know what parts of their policy actually make it a valid DPA.

Edit: I just noticed that GDPR and DPAs are mentioned in the privacy policies of some of their products, like G-Suite and Google Cloud Platform, but I don't think this is valid in general for the privacy policy of all of their services, especially their free services. I'm sure there are millions of people who use at least one of Google's free services as part of their jobs, by the way.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.