Citrix Data Processing Addendum & EU Standard Contractual Clauses

Citrix is committed to protecting the personal information you share with us. This Data Processing Addendum (DPA) describes the privacy practices Citrix applies to any personal information processed on your behalf by Citrix when providing Citrix Cloud services, technical support services or consulting services (“Services”). This DPA is part of the Citrix EULA, EUSA or services agreement applicable to the Services (“Agreement”), does not require execution, and applies to all new orders for Services placed under the Agreement on or after September 17, 2021 (unless otherwise specified in the order for Services).

The Citrix EU Standard Contractual Clauses may be executed at your option. We have provided the new 2021/914/EU SCCs Module 2 and Module 3 options for your use based on whether you are acting as a Controller or Processor when engaging Citrix Services. We have also retained the original 2010/87/EU Controller to Processor SCCs if you are in a jurisdiction that accepts the 2010/87/EU SCCs but has not approved use of the new 2021/914/EU SCCs.

Citrix EU Standard Contractual Clauses

2021/914/EU SCCs Module Two (Controller to Processor)

2021/914/EU SCCs Module Three (Processor to Processor)

2010/87/EU SCCs (Controller to Processor)

Frequently Asked Questions

Yes. It applies to all personal information as defined in the DPA or under applicable data protection laws on a global basis, including from residents of the European Economic Area, Switzerland and the United Kingdom.

No. The DPA is incorporated by reference into the Agreement and applies to orders of Services under the Agreement placed on or after September 17, 2021.

Yes, the appropriate SCCs are incorporated by reference in the DPA for applicable international transfers. Specifically, the DPA states that for countries that have adopted the use of the new 2021/914/EU SCCs, those SCCs apply. For countries that currently accept the 2010/87/EU SCCs but have not approved the use of the new 2021/924/EU SCCs, the 2010/87/EU SCCs apply.

For customers who would like to also formally execute SCCs, an executable version is available by following a few simple steps:

  1. Go to and Sign In to your Citrix My Account,
  2. Click “View EU Standard Contractual Clauses” on the left side, and
  3. Select the SCC or SCCs that apply to you and click “New Agreement” to complete the SCCs that apply to your business. (Please be patient while we update this process to accommodate the new 2021 versions. We expect this to be available the week of September 20, 2021.)

If you enter into an agreement for Services directly with Citrix, then this DPA applies.  Otherwise, only the terms of your contract with the Citrix Partner apply.

No, Citrix has a specific Partner DPA that governs transactions between Citrix and our Partners, which is incorporated by reference into the applicable Partner Program Guides.