“We are currently in the process of updating our Terms of Use and Privacy Policy in preparation for the GDPR. These updates will be released before May 25th."

"The updated Privacy Policy will, among other things, provide additional details for you and your subscribers about how their data is processed by MailChimp, principally as a processor, but also in certain limited circumstances as a controller. We will also provide information about how your subscribers will be able to exercise their rights under the GDPR, including to object or withdraw from certain processing performed by MailChimp.

 In the meantime, our DPA has been updated to incorporate the mandatory data processing provisions of Article 28 of the GDPR. You may find our DPA here where you can fully execute the agreement online. From that page you may also view and download a sample for review. To fully execute the agreement, go back to the main page and complete the necessary fields. We also prepared an FAQ regarding our DPA that you can read here. Users should sign the updated DPA.

 Additionally, MailChimp adheres to the Privacy Shield Principles. We are EU-U.S. and Swiss-U.S. Privacy Shield certified through 2018 and listed on the US Department of Commerce Privacy Shield website as The Rocket Science Group LLC d/b/a MailChimp.