{"id":258263,"date":"2023-11-13T22:26:19","date_gmt":"2023-11-13T22:26:19","guid":{"rendered":"https:\/\/producermeraki.wpengine.com\/?page_id=258263"},"modified":"2025-09-03T21:05:10","modified_gmt":"2025-09-03T21:05:10","slug":"gdpr","status":"publish","type":"page","link":"https:\/\/meraki.cisco.com\/gdpr\/","title":{"rendered":"GDPR"},"content":{"rendered":"\n<style type=\"text\/css\">\n    #masthead-hero-block_f182221878bdc0fba8e33fb7d3218729 {\n        \/* Add styles that use ACF values here *\/\n                                    background-image: url(https:\/\/meraki.cisco.com\/wp-content\/uploads\/2023\/10\/hero-gdpr-m-fv.jpg);\n                                        }\n\n    @media screen and (min-width: 960px) {\n        #masthead-hero-block_f182221878bdc0fba8e33fb7d3218729 {\n            \/* Add styles that use ACF values here *\/\n                                                background-image: url(https:\/\/meraki.cisco.com\/wp-content\/uploads\/2023\/10\/hero-gdpr-fv.jpg);\n                    background-color: transparent;\n                                    }\n    }\n<\/style>\n\n<div id=\"masthead-hero-block_f182221878bdc0fba8e33fb7d3218729\" class=\"cmp-masthead-hero tphdmg alignfull masthead-full no-mb text-right\">\n    \n    \n    <div class=\"container text-right\">\n                            <div class=\"row\">\n            <div class=\"col-12 col-lg-5 offset-lg-6 cmp-masthead-hero__text-black\">\n                                <div class=\"cmp-masthead-hero__content\">\n                                    <h1 class=\"cmp-masthead-hero__headline\">\n                        Meraki &#038; GDPR                    <\/h1>\n                                                                        <\/div>\n                            <\/div>\n        <\/div>\n        \n    <\/div>\n\n    \n<\/div>\n\n\n\n<style>\n@media only screen and (max-width: 600px) {\n.cmp-masthead-hero .container{\npadding-top: 40px !important;\n}\n}\n.cmp-tile-grid .cmp-tile-grid__card img.mb-2 {\n    width: 48px !important;\n}\n.background-white {\n    max-width: 1200px !important;\n}\n.cmp-tile-grid__card.text-center.text-black.p-2.h-100.d-flex.flex-column.bg-gray-100 {\n    background-color: #fff;\n}\na.nchrlnk {\n    color:#E9662E !important; \n    text-transform: lowercase !important;\n}\na.nchrlnknt {\n    color:#E9662E !important; \n    text-transform: none !important;\n}\nhover.nchrlnk {\n    text-decoration: underline !important;\n }\n.cmp-accordion-card-images__block.left-block {\n    padding-top: 0;\n}\n.txbld .text-blade-component {\n    padding-bottom: 0;\n}\n.selecyed-en .cmp-accordion-card-images__toggle h4 {\n    font-family: \"Inter Semi Bold\" !important;\n    font-size: 24px !important;\n    color: #393939;\n    line-height: 32px !important;\n    font-weight: 500 !important;\n    letter-spacing: .2px !important;\n}\n.bttmspc .text-blade-component {\n    padding-bottom: 25px;\n}\n\ntable {\n  border: 1px solid #ccc;\n  border-collapse: collapse;\n  margin: 0;\n  padding: 0;\n  width: 100%;\n  table-layout: fixed;\n}\n\n\n\ntable tr {\n  background-color: #f8f8f8;\n  border: 1px solid #ddd;\n  padding: .35em;\n}\n\ntable th,\ntable td {\n  padding: .625em;\n  text-align: center;\n}\n\n\n@media screen and (max-width: 600px) {\n  table {\n    border: 0;\n  }\n\n  table caption {\n    font-size: 1.3em;\n  }\n  \n  table thead {\n    border: none;\n    clip: rect(0 0 0 0);\n    height: 1px;\n    margin: -1px;\n    overflow: hidden;\n    padding: 0;\n    position: absolute;\n    width: 1px;\n  }\n  \n  table tr {\n    border-bottom: 3px solid #ddd;\n    display: block;\n    margin-bottom: .625em;\n  }\n  \n  table td {\n    border-bottom: 1px solid #ddd;\n    display: block;\n    font-size: .8em;\n    text-align: right;\n  }\n  \n  table td::before {\n    content: attr(data-label);\n    float: left;\n    font-weight: bold;\n    text-transform: uppercase;\n  }\n  table td:last-child {\n    border-bottom: 0;\n  }\n}\n\n<\/style>\n\n\n<section id=\"component-text-blade-block_e7ed15502630e82d9afb20c5c4f1cd8b\" class=\"feature-section feat-sect component-text-blade bttmspc\">\n    <div class=\"text-blade-component\">\n        <div class=\"background-white\">\n                        <h2 class=\"headline\">Cisco Meraki is committed to protecting the data that our customers entrust to our cloud-hosted service. <\/h2>            <div class=\"subheader\">The General Data Protection Regulation (GDPR) introduces specific requirements that apply to companies established in the EU, or located anywhere in the world when processing personal data in connection with offering their goods or services to persons in the EU. For Meraki organizations hosted on the Meraki EU cloud service, Meraki has made improvements to its cloud-hosted service in light of GDPR, introducing dedicated new privacy dashboard tools.<\/div>                    <\/div>\n    <\/div>\n<\/section>\n\n\n\n<section id=\"component-text-blade-block_4535222ee8a0eb96a434ce4e089d4c7e\" class=\"feature-section feat-sect component-text-blade\">\n    <div class=\"text-blade-component\" style=\"\n    background-color: #F8F8F8;\n    padding-bottom: 16px;\n    padding-top: 35px;\n\">\n        <div class=\"background-white\">\n                        <div class=\"headline\" style=\"\n    background-color: #F8F8F8;\n\">Meraki solutions and tools for the GDPR:<\/div>                                <\/div>\n    <\/div>\n<\/section>\n\n\n\n\n\n<div id=\"cmp-tile-grid-block_ed0709167eda43dc4471ab146a96df0d\" class=\"cmp-tile-grid mgsz alignfull my-4 my-md-8\" style=\"\n    margin-top: 0 !important;\n    padding-top: 0px;\n    margin-bottom: 0px !important;\n    background-color: #F8F8F8 !important;\n\">\n\t<div class=\"container\">\n\t\t\t\t\t\t\t<div class=\"cmp-tile-grid__grid\">\n\t\t\t\t<div class=\"row\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"col-12 col-md-4 mb-2\">\n\t\t\t\t\t\t                \t\t\t\t\t\t\t<div class=\"cmp-tile-grid__card text-center text-black p-2 h-100 d-flex flex-column bg-gray-100\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" aria-label=\"\" loading=\"lazy\" src=\"https:\/\/meraki.cisco.com\/wp-content\/uploads\/2023\/10\/gdpr-dataexport.svg\" alt=\"\" class=\"mb-2\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4 class=\"mb-auto\">Data access and portability <p style=\"font-size: 14px; line-height: 24px; font-weight: 400; font-family: Inter Regular, helvetica, arial, sans-serif ;margin-top:20px;\">To honor customers\u2019 requests to export their information, Meraki has built functionality to enable accessibility and export of dashboard data.<\/p><p><\/p><\/h4>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"col-12 col-md-4 mb-2\">\n\t\t\t\t\t\t                \t\t\t\t\t\t\t<div class=\"cmp-tile-grid__card text-center text-black p-2 h-100 d-flex flex-column bg-gray-100\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" aria-label=\"\" loading=\"lazy\" src=\"https:\/\/meraki.cisco.com\/wp-content\/uploads\/2023\/10\/gdpr-forgotten.svg\" alt=\"\" class=\"mb-2\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4 class=\"mb-auto\">The \u2018right to be forgotten\u2019 <p style=\"font-size: 14px; line-height: 24px; font-weight: 400; font-family: Inter Regular, helvetica, arial, sans-serif ;margin-top:20px;\">Customers can delete dashboard data, either for themselves, or in response to requests from users of their networks.<\/p><p><\/p><\/h4>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"col-12 col-md-4 mb-2\">\n\t\t\t\t\t\t                \t\t\t\t\t\t\t<div class=\"cmp-tile-grid__card text-center text-black p-2 h-100 d-flex flex-column bg-gray-100\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" aria-label=\"\" loading=\"lazy\" src=\"https:\/\/meraki.cisco.com\/wp-content\/uploads\/2023\/10\/gdpr-processing.svg\" alt=\"\" class=\"mb-2\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4 class=\"mb-auto\">Restriction of processing <p style=\"font-size: 14px; line-height: 24px; font-weight: 400; font-family: Inter Regular, helvetica, arial, sans-serif ;margin-top:20px;\">In the Meraki dashboard, data can be identified, hidden, and removed upon a verified request to restrict processing.<\/p><p><\/p><\/h4>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"col-12 col-md-4 mb-2\">\n\t\t\t\t\t\t                \t\t\t\t\t\t\t<div class=\"cmp-tile-grid__card text-center text-black p-2 h-100 d-flex flex-column bg-gray-100\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" aria-label=\"\" loading=\"lazy\" src=\"https:\/\/meraki.cisco.com\/wp-content\/uploads\/2023\/10\/gdpr-tracking.svg\" alt=\"\" class=\"mb-2\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4 class=\"mb-auto\">Tracking GDPR-related requests <p style=\"font-size: 14px; line-height: 24px; font-weight: 400; font-family: Inter Regular, helvetica, arial, sans-serif ;margin-top:20px;\">The dashboard event log now includes functionality for tracking and verifying the status of GDPR requests.<\/p><p><\/p><\/h4>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"col-12 col-md-4 mb-2\">\n\t\t\t\t\t\t                \t\t\t\t\t\t\t<div class=\"cmp-tile-grid__card text-center text-black p-2 h-100 d-flex flex-column bg-gray-100\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" aria-label=\"\" loading=\"lazy\" src=\"https:\/\/meraki.cisco.com\/wp-content\/uploads\/2023\/10\/gdpr-optin.svg\" alt=\"\" class=\"mb-2\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4 class=\"mb-auto\">Consent tools <p style=\"font-size: 14px; line-height: 24px; font-weight: 400; font-family: Inter Regular, helvetica, arial, sans-serif ;margin-top:20px;\">Enhanced splash page functionality allows Meraki customers to provide notice to, and obtain any necessary consents from, users of their networks for the collection, processing, and storage of network user data.<\/p><p><\/p><\/h4>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"col-12 col-md-4 mb-2\">\n\t\t\t\t\t\t                \t\t\t\t\t\t\t<div class=\"cmp-tile-grid__card text-center text-black p-2 h-100 d-flex flex-column bg-gray-100\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" aria-label=\"\" loading=\"lazy\" src=\"https:\/\/meraki.cisco.com\/wp-content\/uploads\/2023\/10\/gdpr-visibility.svg\" alt=\"\" class=\"mb-2\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4 class=\"mb-auto\">Data hosting visibility <p style=\"font-size: 14px; line-height: 24px; font-weight: 400; font-family: Inter Regular, helvetica, arial, sans-serif ;margin-top:20px;\">When creating a new account, Meraki customers have the option to select the region where their data will be stored. For verification, the dashboard displays the hosting region on every page.<\/p><p><\/p><\/h4>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<\/div>\n<\/div>\n\n\n\n<section id=\"component-text-blade-block_c913f2ae67ad986587a801b6281a05f1\" class=\"feature-section feat-sect component-text-blade\" style=\"\n    \/* background-color: #F8F8F8; *\/\n    padding-top: 0px !important;\n\">\n    <div class=\"text-blade-component\" style=\"\n    background-color: #F8F8F8;\n    padding-top: 0;\n    padding-bottom: 0 !important;\n\">\n        <div class=\"background-white\">\n                                    <div class=\"subheader\" style=\"\n    background-color: #F8F8F8 !important;\n\">Further details on the use of these tools can be found at <a class=\"nchrlnk\" href=\"https:\/\/documentation.meraki.com\/zGeneral_Administration\/Privacy_and_Security\/GDPR\">documentation.meraki.com<\/a>.<\/div>                    <\/div>\n    <\/div>\n<\/section>\n\n\n<section id=\"component-text-blade-block_e2abf6578263713b320c500b79aa90d5\" class=\"feature-section feat-sect component-text-blade txbld\">\n    <div class=\"text-blade-component\">\n        <div class=\"background-white\">\n                        <h2 class=\"headline\">Capturing Spirit and Intent<\/h2>            <div class=\"subheader\">The GDPR goes into great detail and sets new standards for the handling of user data. Understanding the spirit, intent and terminology of the regulation is key to developing new tools and practices, both for Cisco Meraki itself, and for those who provide services using Meraki technology:<\/div>                    <\/div>\n    <\/div>\n<\/section>\n\n\n\n<style type=\"text\/css\">\n    #accordion-card-images-block_5d3419c2840f0c35d7889a0691df7402 {\n        \/* Add styles that use ACF values here *\/\n    }\n<\/style>\n\n\n<div id=\"accordion-card-images-block_5d3419c2840f0c35d7889a0691df7402\" class=\"cmp-accordion-card-images layout-no_image \">\n    <div class=\"cmp-accordion-card-images__background desktop-only\">\n             \t\t    \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-1\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-2\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-3\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-4\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-5\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-6\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-7\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-8\">\n                                        <\/div>\n    <div class=\"cmp-accordion-card-images__wrapper\">\n        <div class=\"container\">\n            <div class=\"row\">\n                <div class=\"col-12 col-xxl-12 left-block\">\n                    <div class=\"cmp-accordion-card-images__block left-block\">\n                        <div class=\"cmp-accordion-card-images__eyebrow\">\n                            <h2><\/h2>\n                        <\/div>\n                                                    <div class=\"cmp-accordion-card-images__toggle\">\n                                                                                                        <div id=\"accordion1\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-1\" data-accordion-id=\"accordion-1\">\n                                            <h3> GDPR Basics<\/h3>\n                                            <div id=\"acc-icon\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-1-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p><strong>Data Controller: <\/strong>the entity responsible for making decisions regarding the processing of personal data that has the direct relationship with the individual data subject (i.e., when handling employee data, Cisco Meraki acts as the Data Controller.)\r\n<br><br>\r\n<strong>Data Processor:<\/strong> the natural or legal person processing personal data on behalf of the Data Controller. Importantly, GDPR significantly changes the level of responsibility and accountability of Data Processors. Under GDPR, Data Processors have direct liability and are subject to regulatory enforcement and civil actions. GDPR also imposes statutory obligations related to processing records, data breach notification processes and erasure of personal data. Notably, when providing products to our customers, Cisco Meraki acts primarily as a Data Processor with respect to customer personal data.\r\n<br><br>\r\n<strong>Personal Data: <\/strong>any information relating to an identified or identifiable natural person (i.e., the data subject).\r\n<br><br>\r\n<strong>Processing:<\/strong> any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion2\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-2\" data-accordion-id=\"accordion-2\">\n                                            <h3>Security<\/h3>\n                                            <div id=\"acc-icon2\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-2-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>Security is foundational to the design of all products and solutions at Meraki. According to the GDPR, the controller and the processor shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk. Meraki has invested heavily in building security into every layer of the dashboard. In accordance with requirements of the GDPR around security incident notifications, Meraki will continue to meet its obligations and offer contractual assurances. Some examples are:\r\n<ul>\r\n<li>Out-of-band Control Plane. Only network management information (not user data) flows from devices to the Meraki cloud, dramatically limiting the amount of personal data that is transferred to the Meraki cloud.\r\n\r\n<li>Networks configured to operate in the EU Cloud ensure that even the network management information is stored only in the European Economic Area (EEA), including failover and back-up. With best practices implemented, customers can prevent the transfer of any personal data outside the EEA.\r\n<\/ul>\r\n<p>More information about Meraki\u2019s security and tools can be found <a class=\"nchrlnk\" href=\"https:\/\/meraki.cisco.com\/trust#tools\">here<\/a>.<\/p><\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion3\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-3\" data-accordion-id=\"accordion-3\">\n                                            <h3>Subprocessors<\/h3>\n                                            <div id=\"acc-icon3\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-3-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>Meraki from time to time may partner with third party service providers who contract to provide the same level of data protection and information security that customers can expect from Meraki. Some of these third parties are engaged as \u201csubprocessors\u201d to process customer data, including limited personal data, in connection with providing you Meraki products, including the dashboard.\r\n<br><br>\r\n<p>A list of Meraki\u2019s subprocessors can be found <a class=\"nchrlnk\" href=\"https:\/\/meraki.cisco.com\/trust#subprocessors\">here<\/a>.<\/p><\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion4\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-4\" data-accordion-id=\"accordion-4\">\n                                            <h3>International Data Transfers<\/h3>\n                                            <div id=\"acc-icon4\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-4-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>The GDPR provides for several mechanisms to facilitate transfers of personal data outside of the European Economic Area (EEA). These mechanisms are aimed at confirming an adequate level of protection or ensuring the implementation of appropriate safeguards when personal data is transferred to a third country.\r\n<br><br>\r\n<strong>Binding Corporate Rules (BCR)<\/strong>\r\n<br>\r\nCisco&#8217;s\u00a0<a href=\"http:\/\/ec.europa.eu\/newsroom\/article29\/item-detail.cfm?item_id=613841\">BCR-C<\/a>\u00a0has been approved. Cisco\u2019s data protection and privacy policies, standards, and related documentation (\u201cBCR-C\u201d) have been approved by the European data protection supervisory authorities.\u00a0 This approval demonstrates that Cisco\u2019s Data Protection &amp; Privacy program is aligned with EU requirements, including GDPR. \u00a0Cisco\u2019s BCR-C sets forth the mandatory, minimum standards for handling EU personal data by Cisco, as a data controller.\u00a0 BCR-C approval serves as a legally valid transfer mechanism and commits Cisco to processing EU personal data in accordance with EU data protection standards anywhere in the world that Cisco operates.\r\n\r\n\r\n<br><br>\r\n<strong>EU-U.S. Data Privacy Framework, the U.K. Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework<\/strong>\r\n<br>\r\nCisco is\u00a0<a class=\"nchrlnk\" href=\"https:\/\/www.cisco.com\/c\/en\/us\/about\/legal\/privacy.html\">certified<\/a>\u00a0under three frameworks as set forth by the U.S. Department of Commerce regarding the collection, use, processing, and cross-border transfer of personal data from the European Economic Area (EEA), the United Kingdom (and Gibraltar), and Switzerland, respectively. Cisco is committed to managing all personal data received from the EEA, United Kingdom (and Gibraltar), and Switzerland, in compliance with the requirements of the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the U.K. Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF). Under EU-U.S. DPF, the U.K. Extension to the EU-U.S. DPF, and Swiss-U.S. DPF Cisco is responsible for the processing of personal data it receives and subsequently transfers to a third party. Cisco complies with the EU-U.S. DPF, the U.K. Extension to the EU-U.S. DPF, and Swiss-U.S. DPF for all onward transfers of personal data from the EEA, the United Kingdom (and Gibraltar), and Switzerland., including the onward transfer liability provisions.\u00a0To learn more about EU-U.S. DPF, the U.K. Extension to the EU-U.S. DPF, and Swiss-U.S. DPF , visit the U.S. Department of Commerce&#8217;s <a class=\"nchrlnk\" href=\"https:\/\/www.dataprivacyframework.gov\/s\/participant-search\/participant-detail?id=a2zt0000000GnJ2AAK&amp;status=Active\">Data Privacy Framework site<\/a>.\r\n\r\n\r\n<br><br>\r\n<strong>Cisco Master Data Protection Agreement with EU Model Clauses<\/strong>\r\n<br>\r\nTo protect the free movement of personal data (both Cisco\u2019s and Cisco\u2019s customers\u2019) as needed around the world, we have made available a Master Data Protection Agreement (MDPA) we require from our suppliers and offer to our customers. This MDPA, includes EU Model Clauses which can be inserted where applicable. EU Model Clauses are standardized contractual clauses approved by the EU Commission to be used in agreements by EU-based data controllers to safely (and in compliance with EU requirements) transfer personal data outside of the EU to a non-EU data processor for handling.<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion5\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-5\" data-accordion-id=\"accordion-5\">\n                                            <h3>Certifications<\/h3>\n                                            <div id=\"acc-icon5\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-5-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>The Meraki service is colocated in tier-1 data centers and select public service providers with certifications such as PCI, SOC 2, and ISO 27001. Visit our <a class=\"nchrlnknt\" href=\"https:\/\/meraki.cisco.com\/trust\/#data-centers\">Data Center page<\/a> to learn more.<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion6\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-6\" data-accordion-id=\"accordion-6\">\n                                            <h3>Accountability\/ Transparency<\/h3>\n                                            <div id=\"acc-icon6\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-6-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>Meraki maintains security incident management policies and procedures, including detailed security incident escalation procedures. If Meraki becomes aware of any unlawful destruction, loss, alteration or unauthorized disclosure of Customer Data (a \u201cSecurity Incident\u201d), then Meraki will notify Customer without undue delay and provide Customer with relevant information about the Security Incident, including the type of Customer Data involved, the volume of Customer Data disclosed, the circumstances of the incident, mitigation steps taken, and remedial and preventative action taken.<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion7\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-7\" data-accordion-id=\"accordion-7\">\n                                            <h3>Privacy By Design<\/h3>\n                                            <div id=\"acc-icon7\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-7-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>The Meraki cloud based architecture is designed from the ground up with data protection, privacy, and security in mind. With all new features and product, the Meraki team focuses on these pillars to ensure we provide the best, safest, and most secure solutions to our customers.\r\n<br>\r\n<p>More information about privacy can be found <a class=\"nchrlnk\" href=\"https:\/\/meraki.cisco.com\/trust#privacy\">here<\/a>.<\/p<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion8\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-8\" data-accordion-id=\"accordion-8\">\n                                            <h3>Data Retention<\/h3>\n                                            <div id=\"acc-icon8\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-8-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>The Meraki dashboard contains several logging subsystems that each have unique data retention and export options available. Datasets like event, configuration, and analytics are used for different purposes (business intelligence, operations, risk management, etc.) and are reflected in the native logging capabilities. Data is kept in our systems and backups for no longer than 14 months. This period is set to enable our customers to do year over year reporting. For more information, see our <a class=\"nchrlnknt\" href=\"https:\/\/trustportal.cisco.com\/c\/r\/ctp\/trust-portal.html#\/1620320457399887\">Privacy Data Sheet<\/a>.<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                            <\/div>\n                                                        <div class=\"cmp-accordion-card-images__link\">\n                                                                                            <\/div>\n                        <\/div>\n                        \n                     \n                    <\/div>\n                    \n                                       \n                <\/div>\n            <\/div>\n        <\/div>\n    <\/div>\n<\/div>\n\n\n<div id=\"cmp-cta-banner-block_98a9042306d7248388a344a2fe4c76d8\" class=\"cta-banner-main cmp-cta-banner old_design bg-blue-500 text-white img-flush has-Image\" style=\"margin-bottom: 65px;\">\n<div class=\"container\">\n   <div class=\"row\">\n      <div class=\"col-12 col-lg-8 offset-lg-2\">\n         <p class=\"cmp-cta-banner__subheadline text-black\" style=\"font-size: 24px;padding-top: 49px;font-family: &quot;Sharp Sans Semi Bold&quot;;\">Further explore how Meraki has implemented tools to support the GDPR in this video.<\/p>\n         <div class=\"cmp-cta-banner__btn\">\n            <script src=\"https:\/\/fast.wistia.com\/embed\/medias\/qn25dd3gnd.jsonp\" async=\"\"><\/script><script src=\"https:\/\/fast.wistia.com\/assets\/external\/E-v1.js\" async=\"\"><\/script>\n            <span id=\"wistia-ve7pzy0d3y-1\" class=\"wistia_embed wistia_async_qn25dd3gnd popover=true popoverContent=html wistia_embed_initialized\" style=\"display:inline;\">\n            <div id=\"wistia_41.thumb_container\" class=\"wistia_click_to_play\" style=\"position: relative; display: inline;\">\n               <a data-ga-event=\"CTA_secondary_cta-banner\" class=\"cmp-cta-banner__cta--white btn btn-secondary-white\" href=\"#\" target=\"\" data-diff-lang=\"true\" rel=\"noopener\">Watch Video<\/a>\n            <\/div>\n         <\/div>\n      <\/div>\n   <\/div>\n<\/div>\n\t<\/div>\n\n\n\n<style type=\"text\/css\">\n    #accordion-card-images-block_ea2f09b951c74fcb17284c5d3c1cfac8 {\n        \/* Add styles that use ACF values here *\/\n    }\n<\/style>\n\n\n<div id=\"accordion-card-images-block_ea2f09b951c74fcb17284c5d3c1cfac8\" class=\"cmp-accordion-card-images layout-no_image \">\n    <div class=\"cmp-accordion-card-images__background desktop-only\">\n             \t\t    \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-1\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-2\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-3\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-4\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-5\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-6\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-7\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-8\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-9\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-10\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-11\">\n                                \t\t\n    \t\t\t              \t                    \t<input type=\"hidden\" value=\"\" alt=\"\" class=\"acc-img\" id=\"accordion-12\">\n                                        <\/div>\n    <div class=\"cmp-accordion-card-images__wrapper\">\n        <div class=\"container\">\n            <div class=\"row\">\n                <div class=\"col-12 col-xxl-12 left-block\">\n                    <div class=\"cmp-accordion-card-images__block left-block\">\n                        <div class=\"cmp-accordion-card-images__eyebrow\">\n                            <h2>GDPR Frequently Asked Questions<\/h2>\n                        <\/div>\n                                                    <div class=\"cmp-accordion-card-images__toggle\">\n                                                                                                        <div id=\"accordion1\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-1\" data-accordion-id=\"accordion-1\">\n                                            <h3>What is the GDPR?<\/h3>\n                                            <div id=\"acc-icon\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-1-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>On May 25, 2018, the <strong><u>General Data Protection Regulation (GDPR)<\/u><\/strong> will take effect in the European Union. GDPR governs how both &#8220;Data Controllers&#8221; and &#8220;Data Processors&#8221; collect and process &#8220;Personal Data&#8221; in the EU. Based on well recognized privacy principles of <em>accountability, fairness<\/em> and <em>transparency<\/em>, GDPR brings long awaited consistency to data protection in the EU by harmonizing the existing patchwork of national data protection legislation across all EU member countries.\r\n<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion2\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-2\" data-accordion-id=\"accordion-2\">\n                                            <h3>What type of information does the GDPR apply to?<\/h3>\n                                            <div id=\"acc-icon2\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-2-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>The GDPR applies to all personal data. Personal data means data that can be used to identify an individual.<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion3\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-3\" data-accordion-id=\"accordion-3\">\n                                            <h3>What rights will individuals have under GDPR?<\/h3>\n                                            <div id=\"acc-icon3\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-3-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>The GDPR gives expanded protection to individuals and new rights to manage personal data collected about them, including:\r\n<ul>\r\n<li><strong>The right to be informed<\/strong> &#8211; Organizations must be transparent in how they are using personal data.<\/li>\r\n<li><strong>The right of access<\/strong> &#8211; Individuals have the right to request what information is collected about them and how it is processed.<\/li>\r\n<li><strong>The right of rectification<\/strong> &#8211; Individuals have the right to request that their personal data be rectified, or corrected, if it is inaccurate or incomplete.<\/li>\r\n<li><strong>The right to erasure <\/strong>&#8211; Also known as &#8216;the right to be forgotten&#8217;, this right refers to an individual&#8217;s ability to request deletion or removal of their personal data in certain circumstances.<\/li>\r\n<li><strong>The right to restrict processing<\/strong> &#8211; Individuals have a right to request that their data be blocked or suppressed from processing.<\/li>\r\n<li><strong>The right to data portability<\/strong> &#8211; Individuals have the right to receive a copy of their personal data for their own use.<\/li>\r\n<li><strong>The right to object<\/strong> &#8211; In certain circumstances, individuals are entitled to object to their personal data being used. Such circumstances include use of personal data for direct marketing, historical research or statistical purposes.<\/li>\r\n<\/ul><\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion4\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-4\" data-accordion-id=\"accordion-4\">\n                                            <h3>Who does the GDPR apply to?<\/h3>\n                                            <div id=\"acc-icon4\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-4-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>The GDPR applies to all organizations established in the EU and to organizations, whether or not established in the EU, that process personal data of individuals in the EU in connection with either the offering of goods or services or the monitoring of behavior in the EU. Citizenship and residency are irrelevant. \u201cPresence\u201d in the EU is the trigger.<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion5\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-5\" data-accordion-id=\"accordion-5\">\n                                            <h3>What is the difference between a data processor and data controller?<\/h3>\n                                            <div id=\"acc-icon5\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-5-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p><b>Data Controller<\/b>: is responsible for making decisions about the processing of personal data and has a direct relationship with the individual (i.e., when handling employee data, Cisco Meraki acts as the Data Controller.)\r\n<br><br>\r\n<b>Data Processor<\/b>: processes personal data on behalf of a Data Controller. Importantly, the GDPR significantly changes the level of responsibility and accountability of Data Processors. Under the GDPR, Data Processors have direct liability and are subject to regulatory enforcement and civil actions. The GDPR also imposes statutory obligations related to processing records, data breach notification and erasure of personal data. Notably, when providing products to our customers, Cisco Meraki acts primarily as a Data Processor with respect to personal data collected by customer networks.<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion6\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-6\" data-accordion-id=\"accordion-6\">\n                                            <h3>How does the GDPR affect policy surrounding data breaches?<\/h3>\n                                            <div id=\"acc-icon6\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-6-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>The GDPR requires Data Controllers, our customers, to notify relevant Data Protection Authorities (DPAs) within 72 hours of becoming aware of a personal data breach, unless the breach is unlikely to result in a risk to the rights and freedoms of impacted data subjects. Data Controllers must also notify impacted data subjects without undue delay when a high risk to rights and freedoms is likely. Data Processors, like Meraki, must notify Data Controllers of a data breach without undue delay.\r\n<br><br>\r\nMeraki maintains security incident management policies and procedures, including detailed security incident escalation procedures. If Meraki becomes aware of any unlawful destruction, loss, alteration or unauthorized disclosure of Customer Data (a \u201cSecurity Incident\u201d), then Meraki will notify Customer without undue delay and provide Customer with relevant information about the Security Incident, including the type of customer data involved, the volume of customer data disclosed, the circumstances of the incident, mitigation steps taken, and remedial and preventative action taken.<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion7\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-7\" data-accordion-id=\"accordion-7\">\n                                            <h3>Does Cisco Meraki offer a Data Processing Addendum (DPA)?<\/h3>\n                                            <div id=\"acc-icon7\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-7-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>Yes. The Cisco Master Data Protection Agreement (MDPA) reflects our commitment to privacy, data security, and accountability for our customers, worldwide. For more information regarding how we protect your personal data, Cisco\u2019s overall approach to data protection and privacy, and to view the MDPA, please see <a class=\"nchrlnk\" href=\"https:\/\/www.cisco.com\/c\/en\/us\/about\/trust-center.html\"> here<\/a>. If you would like to put in place the MDPA, please contact your Cisco Meraki account representative to get started.<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion8\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-8\" data-accordion-id=\"accordion-8\">\n                                            <h3>What has Cisco Meraki been doing in preparation for the GDPR?<\/h3>\n                                            <div id=\"acc-icon8\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-8-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>Cisco Meraki is dedicated to helping our customers and partners navigate the GDPR by protecting and respecting personal data, no matter where it is collected or processed, and is committed to compliance with applicable regulatory frameworks in the US and abroad, including the GDPR. Together with the Cisco Privacy Office, Cisco Meraki established a cross-functional team of Product, Engineering, Legal and Privacy experts to ensure that Cisco Meraki is ready to meet the requirements of the GDPR.\r\n<br><br>\r\nPlease refer to our <a class=\"nchrlnk\" href=\"https:\/\/documentation.meraki.com\/zGeneral_Administration\/Privacy_and_Security\/GDPR\">documentation<\/a> for more information about new dashboard features available to our customers in connection with GDPR.<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion9\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-9\" data-accordion-id=\"accordion-9\">\n                                            <h3>What tools and services does Cisco Meraki offer customers to help them comply with the GDPR?<\/h3>\n                                            <div id=\"acc-icon9\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-9-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>Cisco Meraki is actively developing new Dashboard features and APIs to help enable all Cisco Meraki customers, as Data Controllers, to respond to data subject requests under the GDPR.\r\n<br><br>\r\nThese features and capabilities will be available via the Meraki dashboard without any additional cost to customers with a valid software license.\r\n<br><br>\r\nPlease refer to our <a class=\"nchrlnk\" href=\"https:\/\/documentation.meraki.com\/zGeneral_Administration\/Privacy_and_Security\/GDPR\">documentation<\/a> for more information about the features available to our customers.<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion10\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-10\" data-accordion-id=\"accordion-10\">\n                                            <h3>How does a company know if they are compliant with the GDPR?<\/h3>\n                                            <div id=\"acc-icon10\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-10-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>Currently, there is no certification recognized by the European Commission to demonstrate that a company is in compliance with the GDPR. Companies and institutions that are within scope of the GDPR may choose to demonstrate GDPR readiness through third party certifications, contractual commitments regarding data protection practices, and internal policies and procedures. Cisco Meraki is actively monitoring the development of a recognized certification.<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion11\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-11\" data-accordion-id=\"accordion-11\">\n                                            <h3>Does Meraki make contractual commitments regarding compliance with European data protection laws, including the GDPR?<\/h3>\n                                            <div id=\"acc-icon11\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-11-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>Yes. Meraki customers may enter into the Cisco MDPA, which incorporates the current iteration of the European Commission\u2019s standard contractual clauses (commonly known as the \u201cmodel clauses\u201d). You may view the MDPA <a class=\"nchrlnk\"  href=\"https:\/\/www.cisco.com\/c\/en\/us\/about\/trust-center.html\">here<\/a>. Please contact your Cisco Meraki account representative if you wish to enter into the MDPA.<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                                                                        <div id=\"accordion12\" class=\"accordion\">\n                                        <a href=\"javascript:void(0);\" class=\"accordion__headline acc-button-12\" data-accordion-id=\"accordion-12\">\n                                            <h3>Where can I find more information about how Meraki processes customer data?<\/h3>\n                                            <div id=\"acc-icon12\" class=\"acc-icon accordion__icon icons\"><\/div>\n                                        <\/a>\n                                        <div id=\"accordion-12-copy\" class=\"accordion__detail acc-card\" style=\"display: none;\">\n                                                                                        \n                                                                                                                                    <div class=\"accordion__body-text\">\n                                                <p>Additional information about Meraki\u2019s security and data privacy program can be found <a class=\"nchrlnk\" href=\"https:\/\/meraki.cisco.com\/trust\/#privacy\">here<\/a>.<\/p>\n                                            <\/div>                                            \n                                                                                    <\/div>\n                                    <\/div>\n                                                            <\/div>\n                                                        <div class=\"cmp-accordion-card-images__link\">\n                                                                                            <\/div>\n                        <\/div>\n                        \n                     \n                    <\/div>\n                    \n                                       \n                <\/div>\n            <\/div>\n        <\/div>\n    <\/div>\n<\/div>\n\n\n<div class=\"container\" style=\"max-width: 1300px; padding-bottom: 40px;\">\n  \n\n  <div>\n    <div class=\"col-xs-12 text-center\" style=\"height: 100px;\">\n      <h2>Additional Resources<\/h2>\n    <\/div>\n  <\/div>\n  \n  <div class=\"row\">\n    <div class=\"col-sm-6 first-column\">\n     \n        <a class=\"nchrlnknt\" href=\"https:\/\/documentation.meraki.com\/zGeneral_Administration\/Privacy_and_Security\/EU_Cloud_Configuration_Guide\">Cisco Meraki EU Cloud Configuration Guide<\/a><br>\n        <a class=\"nchrlnknt\" href=\"https:\/\/meraki.cisco.com\/lib\/pdf\/meraki_eu_dpa.pdf\">Cisco Meraki EU Data Processing Addendum<\/a><br>\n        <a class=\"nchrlnknt\" href=\"https:\/\/www.dataprivacyframework.gov\/s\/participant-search\/participant-detail?id=a2zt0000000GnJ2AAK&amp;status=Active\">EU-U.S. Data Privacy Framework<\/a><br>\n\t\t<a class=\"nchrlnknt\" href=\"https:\/\/www.dataprivacyframework.gov\/s\/participant-search\/participant-detail?id=a2zt0000000GnJ2AAK&amp;status=Active\">The U.K. Extension to the EU-U.S. Data Privacy Framework<\/a><br>\n\t\t<a class=\"nchrlnknt\" href=\"https:\/\/www.dataprivacyframework.gov\/s\/participant-search\/participant-detail?id=a2zt0000000GnJ2AAK&amp;status=Active\">Swiss-U.S. Data Privacy Framework<\/a><br>\n        <a class=\"nchrlnknt\" href=\"https:\/\/meraki.cisco.com\/lib\/pdf\/eu_technical_organizational_measures.pdf\">Cisco Meraki Technical and Organizational Measures<\/a>\n      \n      \n      \n    <\/div>\n    <div class=\"col-sm-6 second-column\">\n     \n          <a class=\"nchrlnknt\" href=\"https:\/\/meraki.cisco.com\/trust#overview\">Cisco Meraki Trust Page<\/a><br>\n        <a class=\"nchrlnknt\" href=\"https:\/\/meraki.cisco.com\/trust#oob\">Cisco Meraki Out of Band Architecture<\/a><br>\n        <a class=\"nchrlnknt\" href=\"https:\/\/meraki.cisco.com\/trust#privacy\">Cisco Meraki EU Privacy and Data Protection Compliance<\/a><br>\n        <a class=\"nchrlnknt\" href=\"https:\/\/meraki.cisco.com\/trust#pci\">Cisco Meraki PCI Compliance<\/a><br>\n        <a class=\"nchrlnknt\" href=\"https:\/\/meraki.cisco.com\/trust#tools\">Cisco Meraki Security Tools and Best Practices for Administrators<\/a>\n      \n    <\/div> \n  <\/div>\n  <div class=\"row\">\n    \n  <\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Meraki solutions and tools for the GDPR: Data access and portability To honor customers\u2019 requests to export their information, Meraki has built functionality to enable accessibility and export of dashboard data. The \u2018right to be forgotten\u2019 Customers can delete dashboard data, either for themselves, or in response to requests from users of their networks. Restriction [&hellip;]<\/p>\n","protected":false},"author":116,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":""},"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.10 (Yoast SEO v21.3) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>GDPR | Cisco Meraki<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/meraki.cisco.com\/gdpr\/\" \/>\n<meta property=\"og:locale\" content=\"en\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GDPR\" \/>\n<meta property=\"og:description\" content=\"Meraki solutions and tools for the GDPR: Data access and portability To honor customers\u2019 requests to export their information, Meraki has built functionality to enable accessibility and export of dashboard data. The \u2018right to be forgotten\u2019 Customers can delete dashboard data, either for themselves, or in response to requests from users of their networks. Restriction [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/meraki.cisco.com\/gdpr\/\" \/>\n<meta property=\"og:site_name\" content=\"Cisco Meraki\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/CiscoMeraki\/\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-03T21:05:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/meraki.cisco.com\/wp-content\/uploads\/2023\/10\/gdpr-dataexport.svg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@meraki\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/meraki.cisco.com\/gdpr\/\",\"url\":\"https:\/\/meraki.cisco.com\/gdpr\/\",\"name\":\"GDPR | Cisco Meraki\",\"isPartOf\":{\"@id\":\"https:\/\/meraki.cisco.com\/#website\"},\"datePublished\":\"2023-11-13T22:26:19+00:00\",\"dateModified\":\"2025-09-03T21:05:10+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/meraki.cisco.com\/gdpr\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/meraki.cisco.com\/gdpr\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/meraki.cisco.com\/gdpr\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/meraki.cisco.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GDPR\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/meraki.cisco.com\/#website\",\"url\":\"https:\/\/meraki.cisco.com\/\",\"name\":\"Cisco Meraki\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/meraki.cisco.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/meraki.cisco.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/meraki.cisco.com\/#organization\",\"name\":\"Cisco Meraki\",\"url\":\"https:\/\/meraki.cisco.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/meraki.cisco.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/meraki.cisco.com\/wp-content\/uploads\/2020\/04\/cisco-meraki-og-logo-655x655.jpg\",\"contentUrl\":\"https:\/\/meraki.cisco.com\/wp-content\/uploads\/2020\/04\/cisco-meraki-og-logo-655x655.jpg\",\"width\":655,\"height\":655,\"caption\":\"Cisco Meraki\"},\"image\":{\"@id\":\"https:\/\/meraki.cisco.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/CiscoMeraki\/\",\"https:\/\/twitter.com\/meraki\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"GDPR | Cisco Meraki","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/meraki.cisco.com\/gdpr\/","og_locale":"en","og_type":"article","og_title":"GDPR","og_description":"Meraki solutions and tools for the GDPR: Data access and portability To honor customers\u2019 requests to export their information, Meraki has built functionality to enable accessibility and export of dashboard data. The \u2018right to be forgotten\u2019 Customers can delete dashboard data, either for themselves, or in response to requests from users of their networks. Restriction [&hellip;]","og_url":"https:\/\/meraki.cisco.com\/gdpr\/","og_site_name":"Cisco Meraki","article_publisher":"https:\/\/www.facebook.com\/CiscoMeraki\/","article_modified_time":"2025-09-03T21:05:10+00:00","og_image":[{"url":"https:\/\/meraki.cisco.com\/wp-content\/uploads\/2023\/10\/gdpr-dataexport.svg"}],"twitter_card":"summary_large_image","twitter_site":"@meraki","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/meraki.cisco.com\/gdpr\/","url":"https:\/\/meraki.cisco.com\/gdpr\/","name":"GDPR | Cisco Meraki","isPartOf":{"@id":"https:\/\/meraki.cisco.com\/#website"},"datePublished":"2023-11-13T22:26:19+00:00","dateModified":"2025-09-03T21:05:10+00:00","breadcrumb":{"@id":"https:\/\/meraki.cisco.com\/gdpr\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/meraki.cisco.com\/gdpr\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/meraki.cisco.com\/gdpr\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/meraki.cisco.com\/"},{"@type":"ListItem","position":2,"name":"GDPR"}]},{"@type":"WebSite","@id":"https:\/\/meraki.cisco.com\/#website","url":"https:\/\/meraki.cisco.com\/","name":"Cisco Meraki","description":"","publisher":{"@id":"https:\/\/meraki.cisco.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/meraki.cisco.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/meraki.cisco.com\/#organization","name":"Cisco Meraki","url":"https:\/\/meraki.cisco.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/meraki.cisco.com\/#\/schema\/logo\/image\/","url":"https:\/\/meraki.cisco.com\/wp-content\/uploads\/2020\/04\/cisco-meraki-og-logo-655x655.jpg","contentUrl":"https:\/\/meraki.cisco.com\/wp-content\/uploads\/2020\/04\/cisco-meraki-og-logo-655x655.jpg","width":655,"height":655,"caption":"Cisco Meraki"},"image":{"@id":"https:\/\/meraki.cisco.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/CiscoMeraki\/","https:\/\/twitter.com\/meraki"]}]}},"_links":{"self":[{"href":"https:\/\/meraki.cisco.com\/wp-json\/wp\/v2\/pages\/258263"}],"collection":[{"href":"https:\/\/meraki.cisco.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/meraki.cisco.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/meraki.cisco.com\/wp-json\/wp\/v2\/users\/116"}],"replies":[{"embeddable":true,"href":"https:\/\/meraki.cisco.com\/wp-json\/wp\/v2\/comments?post=258263"}],"version-history":[{"count":0,"href":"https:\/\/meraki.cisco.com\/wp-json\/wp\/v2\/pages\/258263\/revisions"}],"wp:attachment":[{"href":"https:\/\/meraki.cisco.com\/wp-json\/wp\/v2\/media?parent=258263"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}