Google Data Loss Prevention

[Hayato Aoki]

Hi

I am trying to use DLP API. Does this API follow GDPR compliance in Europe?

Can we assure that our data is processed or saved? in European data center?

Thank you.

Best Regards, 

Hayato

[sohailalvi]

Hello Hayato,

Google is committed to GDPR compliance across all Google Cloud Platform services as mentioned in this documentation[1]. In addition to that, you can find additional information regarding GDPR compliance in this document [2].

Both G Suite and the Google Cloud Platform are certified under Privacy Shield and we’ve also gained a confirmation of compliance for our model contract clauses from the European Data Protection Authorities, affirming that GCP fully meet the requirements for data transfer from the EU to the rest of the world as mentioned in documentation [1].

However If you have additional questions regarding data storage you can also reach out through this Contact Form[3] for more information.

Thank you,

[1] https://www.blog.google/topics/google-cloud/google-cloud-our-commitment-general-data-protection-regulation-gdpr/
[2] https://www.google.com/cloud/security/gdpr/
[3] https://www.google.com/cloud/contact-form/

[Hayato Aoki]

Hi 

Thank you for your reply.

How can I access contact form regarding data storage? Our customer needs assurance that data is saved in European Economic Area.

If I access contact form [3], I can see five categories and it seems like 'I need support for my Google product' is the right one and clicked 'Support Hub' in the description and selected 'Contact us' in next page, but it returned to the first page again...

Best Regards,

Hayato Aoki 

[Joaquim Suazo]

Hello,

In [1] and [2] you have information about how to restrict resource locations for your Google Cloud Platform Project.

Does this fulfill your requirements?

----------------------------------------------------

[1] https://cloud.google.com/resource-manager/docs/organization-policy/defining-locations

[2] https://cloud.google.com/resource-manager/docs/organization-policy/defining-locations-supported-services#cloud-storage

[Hayato Aoki]

Hi Joaquim,

Thank you for your reply.

We use Google cloud data loss prevention and customer is worried about where their personal data is processed. Customer needs assurance that it's in EEA. I think your link is related to more data storage services, not data loss prevention technology. Is this not correct understanding? 

Hayato

[Joaquim Suazo]

Hello Hayato,

For processing data I should have pointed you to [1]. Nonetheless, the links I provided guide on how to create organization policies to restrict data location, which apply on every resource in the project, so it is worth taking a look.

[1] https://cloud.google.com/dlp/docs/specifying-location