In the meantime, our DPA has been updated to incorporate the mandatory data processing provisions of Article 28 of the GDPR. You may find our DPA here where you can fully execute the agreement online. From that page you may also view and download a sample for review. To fully execute the agreement, go back to the main page and complete the necessary fields. We also prepared an FAQ regarding our DPA that you can read here. Users should sign the updated DPA.
Additionally, MailChimp adheres to the Privacy Shield Principles. We are EU-U.S. and Swiss-U.S. Privacy Shield certified through 2018 and listed on the US Department of Commerce Privacy Shield website as The Rocket Science Group LLC d/b/a MailChimp.