Citrix Data Processing Addendum and the EU & UK Standard Contractual Clauses

Citrix is committed to protecting the personal information you share with us. This Data Processing Addendum (DPA) describes the privacy practices Citrix applies to any personal information processed on your behalf by Citrix when providing Citrix Cloud services, technical support services or consulting services (“Services”). This DPA is part of the Citrix EULA, EUSA or services agreement applicable to the Services (“Agreement”), does not require execution, and applies to all new orders for Services placed under the Agreement on or after September 17, 2021 (unless otherwise specified in the order for Services).

The Citrix EU Standard Contractual Clauses (SCC) and the UK International Data Transfer Addendum (Version B1.0) may be executed at your option. We have provided the 2021/914/EU SCCs Module Two and Module Three options for your use based on whether you are acting as a Controller or Processor when engaging Citrix Services, as well as the UK SCC Addendum.

Frequently Asked Questions

Yes. It applies to all personal information as defined in the DPA or under applicable data protection laws on a global basis, including from residents of the European Economic Area, Switzerland and the United Kingdom.

No. The DPA is incorporated by reference into the Agreement and applies to orders of Services under the Agreement placed on or after September 17, 2021.

Yes, the appropriate SCCs are incorporated by reference in the DPA for applicable international transfers. Specifically, the DPA states that for international transfers subject to the contractual clauses annexed to the EU Commission Decision 2021/914/EU or any successor clauses approved by the EU Commission (2021 EU SCCs), those SCCs apply. And, for international transfers subject to the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses (vB1.0 or any subsequent version) issued by the UK Information Commissioner’s Office (UK SCC Addendum), that Addendum applies.

For customers who would like to also formally execute the 2021 EU SCCs or the UK SCC Addendum, an executable version is available by following a few simple steps:

  1. Go to and Sign In to your Citrix My Account,
  2. Click “View EU Standard Contractual Clauses” on the left side, and
  3. Select the SCC or SCCs that apply to you and click “New Agreement” to complete the SCCs and/or UK SCC Addendum that apply to your business.

If you enter into an agreement for Services directly with Citrix, then this DPA applies.  Otherwise, only the terms of your contract with the Citrix Partner apply.

No, Citrix has a specific Partner DPA that governs transactions between Citrix and our Partners, which is incorporated by reference into the applicable Partner Program Guides.