LinkedIn Data Processing Agreement
December 12, 2022
Table of Contents
- LinkedIn Data Processing Agreement (DPA)
- Schedule A*: Description of the Transfer*
- Schedule B*: CCPA Addendum*
- Schedule C*: Glint Specific Terms and Amendments*
- Schedule D: Technical and Organisational Measures Including Technical and Organisational Measures to Ensure the Security of the Data
This Data Processing Agreement (the “DPA”), entered into by the LinkedIn customer identified on the applicable LinkedIn ordering document for LinkedIn services (“Customer”) and the LinkedIn company identified on the ordering document (along with its affiliates, “LinkedIn”), governs the processing of Personal Data that Customer uploads or otherwise provides LinkedIn in connection with the services, the processing of Personal Data by LinkedIn on behalf of Customer in connection with the services, and the processing of any Personal Data that LinkedIn uploads or otherwise provides to Customer in connection with the services. Terms specific to LinkedIn’s Glint services are provided as Schedule C to this DPA.
This DPA is incorporated into the relevant LinkedIn services agreement attached to or incorporated by reference into the ordering document previously executed by Customer, referred to generically in this DPA as the “LinkedIn Contract”. Collectively, the DPA (including the SCCs, as defined herein), the LinkedIn Contract, and the applicable ordering documents are referred to in this DPA as the “Agreement”. In the event of any conflict or inconsistency between any of the terms of the Agreement, the provisions of the following documents (in order of precedence) shall prevail: (a) the SCCs; (b) the applicable ordering document to the LinkedIn Contract; (c) this DPA; (d) the LinkedIn Contract. Except as specifically amended in this DPA, the LinkedIn Contract and applicable ordering document remain unchanged and in full force and effect.
1. DEFINITIONS
“CCPA” means the California Consumer Privacy Act of 2018 together, as amended by the California Privacy Rights Act of 2020, with any subordinate legislation or regulations.
“Customer Personal Data” means Personal Data that Customer uploads or otherwise provides LinkedIn in connection with its use of LinkedIn’s services.
“Data Protection Requirements” means the General Data Protection Regulation, and any applicable laws, regulations, and other legal requirements relating to (a) privacy, data security, and protection of Personal Data; and (b) the Processing of any Personal Data. Data Protection Requirements may include, but are not limited to, UK GDPR, the Swiss Federal Act on Data Protection 2020, Lei Geral de Proteção de Dados (Brazil’s General Data Protection Law), the CCPA, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, and the Virginia Consumer Data Protection Act.
“EU Personal Data” means Personal Data the sharing of which pursuant to this Agreement is regulated by the General Data Protection Regulation.
“General Data Protection Regulation” or "GDPR" means Regulation (EU) 2016/679 of the European Parliament and of the Council together with any subordinate legislation or regulation implementing the General Data Protection Regulation.
“Personal Data” means information about an individual that (a) can be used to identify, contact or locate a specific individual; (b) can be combined with other information that can be used to identify, contact or locate a specific individual; or (c) is defined as “personal data” or “personal information” by applicable laws or regulations relating to the collection, use, storage or disclosure of information about an identifiable individual.