Esri Privacy Statement (Trust Center Privacy Intro)
NOTEDWhat changed, in plain language
The only change is a fixed web address for the Data Processing Addendum PDF — the link now points to a "trustcenter" folder instead of an "enterprisegis" folder. No privacy terms, data practices, or user rights changed.
This change appears to be cosmetic (formatting, typos, or contact details).
Changelog
- ± CHANGEDLink to the Data Processing Addendum was updated
The download link for Esri's Data Processing Addendum (DPA) now points to a different folder on Esri's download site. The document being linked to and its description ("updated to include Supplementary Measures") are unchanged.
[Data Processing Addendum (DPA)](https://downloads.esri.com/resources/enterprisegis/data_process_addend.pdf) updated to include Supplementary Measures.
[Data Processing Addendum (DPA)](https://downloads.esri.com/resources/trustcenter/data_process_addend.pdf) updated to include Supplementary Measures.
Full text changes — 20250703_rev01 to 20260814_rev01
COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
| 1 | 1 | Esri values the privacy of our customers, distributors, and business partners, as it is a principal component of establishing trust. Esri has created a general company Privacy Statement and a separate supplement to ensure our customers receive the level of privacy they deserve and expect. The privacy statements describe how Esri collects data and uses information you provide to us and are independently validated. |
| 2 | 2 | |
| 3 | 3 | ## Recent privacy advancements |
| 4 | 4 | |
| 5 | 5 | Esri works diligently to ensure we provide a trustworthy environment for our customers; therefore, we are continuously making new privacy advancements to ensure we meet evolving requirements around the world including: |
| 6 | 6 | |
| 7 | - [Data Processing Addendum (DPA)](https://downloads.esri.com/resources/enterprisegis/data_process_addend.pdf) updated to include Supplementary Measures. | |
| 7 | - [Data Processing Addendum (DPA)](https://downloads.esri.com/resources/trustcenter/data_process_addend.pdf) updated to include Supplementary Measures. | |
| 8 | 8 | - [ArcGIS Online HIPAA Eligible Services](https://trust.arcgis.com/en/compliance/hipaa.htm). |
| 9 | 9 | - Expansion of Trust Center Privacy-Separate pages for [GDPR](https://trust.arcgis.com/en/compliance/gdpr.htm), [CCPA](https://trust.arcgis.com/en/compliance/ccpa.htm), and [HIPAA](https://trust.arcgis.com/en/compliance/hipaa.htm). |
| 10 | 10 | |
| 11 | 11 | Esri is committed to protecting the privacy of its customers around the world. Esri ensures compliance with European and Swiss privacy regulations by relying on Standard Contractual Clauses (SCCs) and supplementary measures as part of its Data Processing Addendum to protect the transfer of personal data from the European Economic Area (EEA), the United Kingdom, and Switzerland to the United States. Additionally, Esri has obtained certification under the EU-US Data Privacy Framework (DPF) to facilitate and ensure the protection of data transfers between the EU and the US. Esri engages trusted third parties to validate adherence to privacy principles and maintains data protection standards. |
| 12 | 12 | |
| 13 | 13 | ## Esri privacy statement |