With the EU ruling that Privacy Shield is not an acceptable safeguard for GDPR purposes and with the SCC's are under scrutiny on a case by case basis, what does that mean for Atlassian?
Thank you for reaching out. My name is Petterson and I'm a support engineer at Atlassian.
In fact, Privacy and Security are among the highest priorities at Atlassian, and we’re constantly analyzing developments after the most recent Schrems decision.
To address the most recent court’s decision, we currently provide a pre-signed DPA that includes a full copy of the Standard Contractual Clauses (SCCs). Additionally, older versions of our DPA include the SCCs as a fallback data transfer mechanism in the event of invalidation of the Privacy Shield. If your organization wishes to update to the latest DPA, please follow the instructions in the link below:
To the extent we have ongoing obligations under our Privacy Shield certification, we will continue to honor them.
We're committed to protecting our customers' data and keeping your trust by ensuring data is protected with the utmost care and in compliance with applicable data privacy laws and requirements, including in circumstances where legal standards evolve. For more information about this topic, check GDPR Data Transfers.
For more information around security and data encryption, check Product Security.
Let us know if you have any questions.
We use JSD Clouds for our support, and we discovered that Atlassian hosts our instance with Amazon.
If I understand well, this is not acceptable anymore per Schrems II decision in July, since it is including our customer's emails (since the US gov can request access to it)
Is there any plan to switch to a European hosting company like OVH?
The standard pointer would be to the obvious doc at https://www.atlassian.com/trust/privacy/gdpr
It doesn't actually change the way I talk about GDPR, security, etc with clients, but I really do think that page needs to be updated, probably alongside Atlassian policies.
So I've poked the Community Atlassians, they will go find the right Atlassians to get some updates. Whether it's here, or they update that doc, or write something else, I can't guess.
Hello Compliance fans! I wanted to jump in this group to introduce a brand new Community group that our Atlassian Security team started. The Trust and Security group is a space to share inform...
Connect with like-minded Atlassian users at free events near you!Find an event
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no Community Events near you at the moment.Host an event
You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events