Important updates about the General Data Protection Regulation (GDPR)



Dear Partner,

Dear Partner,
Over the past year we’ve shared how we are preparing to meet the requirements of the GDPR, the new data protection law coming into force on May 25, 2018. The GDPR affects European and non-European businesses using online advertising and measurement solutions when their sites and apps are accessed by users in the European Economic Area (EEA).
Today we are sharing more about our preparations for the GDPR, including our updated EU User Consent Policy, changes to our contract terms, and changes to our products, to help both you and Google meet the new requirements.


Updated EU User Consent Policy

Updated EU User Consent Policy
Google’s EU User Consent Policy is being updated to reflect the new legal requirements of the GDPR. It sets out your responsibilities for making disclosures to, and obtaining consents from, end users of your sites and apps in the EEA. The policy is incorporated into the contracts for most Google ads and measurement products globally.

GoogleのEUユーザー同意ポリシーは、GDPRの新しい法的要件を反映するように更新されています。 EEAのサイトおよびアプリのエンドユーザーに開示し、同意を得る責任を設定します。このポリシーは、大部分のGoogle広告と測定製品の契約に組み込まれています。

Contract changes

Contract changes
We have been rolling out updates to our contractual terms for many products since last August, reflecting Google’s status as either data processor or data controller under the new law (see full classification of our Ads products). The new GDPR terms will supplement your current contract with Google and will come into force on May 25, 2018.


In the cases of DoubleClick for Publishers (DFP), DoubleClick Ad Exchange (AdX), AdMob, and AdSense, Google and its customers operate as independent controllers of personal data that is handled in these services. These new terms provide clarity over our respective responsibilities when handling that data and give both you and Google protections around that controller status. We are committing through these terms to comply with our obligations under GDPR when we use any personal data in connection with these services, and the terms require you to make the same commitment.

DoubleClick for Publishers(DFP)、DoubleClick Ad Exchange(AdX)、AdMob、AdSenseの場合、Googleとその顧客は、これらのサービスで処理される個人データの独立したコントローラとして動作します。これらの新しい規約は、そのデータを処理する際のそれぞれの責任を明確にし、そのコントローラの状況に関するあなたとGoogleの両方の保護を提供します。当社は、これらのサービスに関連して個人データを使用する場合、GDPRに基づく当社の義務を遵守するために、これらの条件を遵守することを約束しています。

Shortly, we will introduce controller-controller terms for DFP and AdX for customers who have online terms.
By May 25, 2018 we will also introduce new terms for AdSense and AdMob for customers who have online terms.


If you use Google Analytics (GA), Attribution, Optimize, Tag Manager or Data Studio, whether the free or paid versions, Google operates as a processor of personal data that is handled in the service. Data processing terms for these products are already available for your acceptance (Admin → Account Settings pages). If you are an EEA client of Google Analytics, data processing will be included in your terms shortly. GA customers based outside the EEA and all GA 360 customers may accept the terms from within GA.

Googleアナリティクス(GA)、アトリビューション、最適化、タグマネージャ、またはデータスタジオを無料または有料のいずれのバージョンで使用しても、Googleはサービスで処理される個人データのプロセッサとして動作します。これらの製品のデータ処理条件は、既に承認されています(管理者→アカウント設定ページ)。 GoogleアナリティクスのEEAクライアントである場合、すぐにデータ処理が条件に含まれます。 EEA以外のGA顧客とすべてのGA 360ユーザーは、GA内の条件に同意することができます。

Product changes

Product changes
To comply, and support your compliance with GDPR, we are:
Launching a solution to support publishers that want to show only non-personalized ads.
Launching new controls for DFP/AdX programmatic transactions, AdSense for Content, AdSense for Games, and AdMob to allow you to control which third parties measure and serve ads for EEA users on your sites and apps. We’ll send you more information about these tools in the coming weeks.
Taking steps to limit the processing of personal information for children under the GDPR Age of Consent in individual member states.
Launching new controls for Google Analytics customers to manage the retention and deletion of their data.
Exploring consent solutions for publishers, including working with industry groups like IAB Europe.

DFP / AdXのプログラムによるトランザクション、コンテンツ向けAdSense、ゲーム向けAdSense、AdMobの新しいコントロールを導入して、サイトやアプリのEEAユーザーの広告を測定して配信する第三者を管理できるようにします。今後数週間、これらのツールに関する詳細情報をお送りします。
IAB Europeなどの業界団体と協力するなど、出版社向けの同意ソリューションの検討。

Find out more

Find out more
You can refer to privacy.google.com/businesses to learn more about Google’s data privacy policies and approach, as well as view our data processing terms and data controller terms.
If you have any questions about this update, please don’t hesitate to reach out to your account team or contact us through the Help Center. We will continue to share further information on our plans in the coming weeks.
The Google Team