# Expedient's Support for GDPR Compliance Source: https://expedient.com/knowledgebase/blog/2018-06-04-expedient-support-for-gdpr-compliance/ [](#) # Expedient's Support for GDPR Compliance June 05, 2018 2 min Read The European Union’s (EU) General Data Protection Regulation (GDPR) became effective May 25, 2018, and with it came a flurry of privacy policy notification updates from websites, other digital publishers, and more, all of whom are tasked with ensuring that any sensitive user data collected on EU residents – even as a sub-processor – is handled and processed according to GDPR requirements. Expedient is considered to be such a “sub-processor”; while our domestic customer base means that GDPR does not have broad applicability to us, many of our customers have operations and/or customers in other countries for which GDPR does apply. As such, Expedient can become a party to the customer data, and must comply under the requirements of the law in order for our customers to maintain their own compliance. In an effort to ensure this compliance in late 2016, Expedient began attesting to a framework called the EU-U.S. Privacy Shield, which is a legal mechanism used to transfer data between an EU country and the United States. Expedient’s attestation subjects the company to the jurisdiction of the Federal Trade Commission or the Department of Trade, which enforces our commitments to safeguard such data. Since Expedient and its employees do not necessarily know which data a client may have is sensitive and which is not, we treat all of it like it is protected and apply our physical and logical security controls uniformly across our facilities and technology platforms. Further, Expedient is prepared to support current and prospective clients with GDPR compliance needs via a Data Protection Agreement (DPA) that can be executed as an addendum to a Master Services Agreement (MSA); this DPA provides the legal framework necessary to demonstrate our compliance as a sub-processor of personal data. [Read more about Expedient’s offerings for GDPR, HIPAA, PCI DSS, or other such compliance and security requirements now](https://www.expedient.com/services/managed-services/compliance-security/), or [contact us for more information.](https://www.expedient.com/lets-talk/) _As Senior Vice President and Chief Operating Officer, Jonathan Rosenson is responsible for overseeing organizational functions that drive growth at Expedient. Jon additionally acts as an external spokesperson conveying the Expedient story._ [_Follow him_](https://x.com/rosenson) _on Twitter._ #### #### #### #### [ ![Jonathan Rosenson](https://res.cloudinary.com/dvlpy3tua/image/upload/fl_sanitize/uploads/jon-rosenson.jpg) Jonathan RosensonPresident & Chief Operating Officer ](/knowledgebase/blog/authors/jonathan-rosenson) [Security and Compliance](/knowledgebase/blog/tag/security%20and%20compliance)[Cloud Computing](/knowledgebase/blog/tag/cloud%20computing)[Data Security](/knowledgebase/blog/tag/data%20security)[managed services](/knowledgebase/blog/tag/managed%20services) ### Related Posts [ #### The VMware Wait Tax: Why Every Quarter of Delay... Inaction on a VMware migration is widely treated as a neutral position, a de... Learn More ](/knowledgebase/blog/2026-08-04-the-vmware-wait-tax-why-every-quarter-of-delay-has-a-price-tag/)[ #### The Great Inversion What was easy is now hard. What was hard is now easy. {% include blog-key-... Learn More ](/knowledgebase/blog/2026-07-29-the-great-inversion/)[ #### Your New Cloud Strategy: Rebalancing for Cost a... {% include blog-key-takeaways.html items=page.key\_takeaways %} A few years a... Learn More ](/knowledgebase/blog/2026-07-15-your-new-cloud-strategy-rebalancing-for-cost-and-performance/) ## Subscribe to Our Blog VMware September 29th, 2026 at 1:00 PM ET ## It’s Time to Decide Your VMware Path [Join us →](https://go.expedient.com/VMWarePath) ### VMware September 29th, 2026 at 1:00 PM ET ## It’s Time to Decide Your VMware Path [Join us →](https://go.expedient.com/VMWarePath)