SCC Amendment to Sitecore DPA
Updated December 2022
Update your existing Data Processing Addendum (DPA) with Sitecore to incorporate the 2021 Standard Contractual Clauses.
As you may be aware, the European Commission issued updated Standard Contractual Clauses on 4 June 2021 (the “New SCCs”) to reflect changes in privacy and data protection law since the GDPR went into effect in May 2018. The deadline for implementation of the New SCCs is 27 December 2022.
Sitecore’s structure using the new SCCs
For Sitecore customers, we have created an SCC Amendment implementing Module 2 of the New SCCs which remains consistent with the existing controller-to-processor structure of your DPA and covers transfers from our customers, each as a data exporter, to Sitecore and its third-party sub-processors engaged to deliver our services, as data importers.
In other words, the sole purpose of the amendment is to update existing agreement(s) to incorporate the New SCCs – no other terms of our agreement(s) will be changed as a result of this amendment.
What do you need to do?
To support compliance with this regulatory requirement, Sitecore has prepared a short amendment to your data processing terms which will incorporate Sitecore’s implementation of the New SCCs. A pre-signed copy of the amendment is available here.
Please review the amendment, arrange countersignature, sign, and return it to Sitecore at [email protected] at your earliest convenience, and in any event, by or before the 27 December 2022 compliance deadline.
If you (or your privacy team) have any questions on the above, please contact [email protected].