Esri Privacy Statement (Trust Center Privacy Intro)
20250703_rev01 → 20260729_rev01COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
1
1
Esri values the privacy of our customers, distributors, and business partners, as it is a principal component of establishing trust. Esri has created a general company Privacy Statement and a separate supplement to ensure our customers receive the level of privacy they deserve and expect. The privacy statements describe how Esri collects data and uses information you provide to us and are independently validated.
2
2
3
3
## Recent privacy advancements
4
4
5
5
Esri works diligently to ensure we provide a trustworthy environment for our customers; therefore, we are continuously making new privacy advancements to ensure we meet evolving requirements around the world including:
6
6
7
- [Data Processing Addendum (DPA)](https://www.esri.com/content/dam/esrisites/en-us/media/legal/gdpr-data-processing-addendums/data-process-addend.pdf) updated to include Supplementary Measures.
7
- [Data Processing Addendum (DPA)](https://downloads.esri.com/resources/enterprisegis/data_process_addend.pdf) updated to include Supplementary Measures.
- Expansion of Trust Center Privacy-Separate pages for [GDPR](https://trust.arcgis.com/en/compliance/gdpr.htm), [CCPA](https://trust.arcgis.com/en/compliance/ccpa.htm), and [HIPAA](https://trust.arcgis.com/en/compliance/hipaa.htm).
10
10
11
11
Esri is committed to protecting the privacy of its customers around the world. Esri ensures compliance with European and Swiss privacy regulations by relying on Standard Contractual Clauses (SCCs) and supplementary measures as part of its Data Processing Addendum to protect the transfer of personal data from the European Economic Area (EEA), the United Kingdom, and Switzerland to the United States. Additionally, Esri has obtained certification under the EU-US Data Privacy Framework (DPF) to facilitate and ensure the protection of data transfers between the EU and the US. Esri engages trusted third parties to validate adherence to privacy principles and maintains data protection standards.