Esri Privacy Statement (Trust Center Privacy Intro)
ARCHIVED 2024-07-02, DATE APPROXIMATE · VERSION 20240702_rev01 · COMPARED WITH 20240229_rev01
Full text changes — 20240229_rev01 to 20240702_rev01
COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
| 5 | 5 | Esri works diligently to ensure we provide a trustworthy environment for our customers; therefore, we are continuously making new privacy advancements to ensure we meet evolving requirements around the world including: |
| 6 | 6 | |
| 7 | 7 | - [Data Processing Addendum (DPA)](https://www.esri.com/content/dam/esrisites/en-us/media/legal/gdpr-data-processing-addendums/data-process-addend.pdf) updated to include Supplementary Measures |
| 8 | 8 | - [ArcGIS Online HIPAA Eligable Services](https://trust.arcgis.com/en/compliance/hipaa.htm) |
| 9 | 9 | - Expansion of Trust Center Privacy-Separate pages for [GDPR](https://trust.arcgis.com/en/compliance/gdpr.htm), [CCPA](https://trust.arcgis.com/en/compliance/ccpa.htm), and [HIPAA](https://trust.arcgis.com/en/compliance/hipaa.htm) |
| 10 | 10 | |
| 11 | Esri has decided to withdraw from the Privacy Shield Framework following the decision by the Court of Justice of the European Union invalidating it. To continue compliance with European and Swiss Privacy regulations, Esri will rely on Standard Contractual Clauses and supplementary measures as part of its Data Processing Addendum to protect transferred Personal Data from the European Economic Area, the United Kingdom and Switzerland to the United States. Esri continues engaging trusted third parties to validate our adherence to privacy principles. | |
| 11 | Esri is committed to protecting the privacy of its customers around the world. Esri ensures compliance with European and Swiss privacy regulations by relying on Standard Contractual Clauses (SCCs) and supplementary measures as part of its Data Processing Addendum to protect the transfer of personal data from the European Economic Area (EEA), the United Kingdom, and Switzerland to the United States. Additionally, Esri has obtained certification under the EU-US Data Privacy Framework (DPF) to facilitate and ensure the protection of data transfers between the EU and the US. Esri engages trusted third parties to validate adherence to privacy principles and maintains data protection standards. | |
| 12 | 12 | |
| 13 | 13 | ## Esri privacy statement |
| 14 | 14 | |
| 15 | 15 | Esri provides a baseline of privacy assurance within the general Esri Privacy Statement. Esri's marketing sites and other public websites are governed by the general Esri Privacy Statement. The Privacy Statement answers the following questions: |
| 16 | 16 | |
| 17 | 17 | - [What personal information does Esri collect and receive?](https://www.esri.com/en-us/privacy/privacy-statements/privacy-statement) |