This provision requires Google to process personal data only as directed by the advertiser, except where applicable law independently requires Google to act otherwise. The advertiser's instructions define the scope of permitted processing.
This analysis describes what Google Ads's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause establishes that the advertiser's documented instructions govern the scope of Google's processing activities. It places on the advertiser the obligation to provide clear, complete, and lawful instructions, and any processing outside those instructions would constitute a potential breach of the agreement.
This provision establishes that personal data processed through Google Ads is limited to the advertiser's instructions, meaning the categories of data processed and the purposes for which it is used are determined by the advertiser's configuration of Google Ads features and data inputs.
How other platforms handle this
If you are a California resident, you have the right to know what personal information we collect about you, the right to delete personal information we have collected from you, the right to opt-out of the sale or sharing of your personal information, the right to correct inaccurate personal informa...
This Privacy Notice describes how Afterpay US, Inc. and affiliates ("Afterpay," "we," "us", and "our") collect, use, disclose, transfer, store, retain and otherwise process your personal information ("you", "your", and "customer") when you visit our website, download our app, apply for and use your ...
Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will: Delete your personal information from our records; and Direct any service providers and contractors to delete your personal information from their records. Correct inaccurate personal information that ...
Monitoring
Google Ads has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Google will process Customer Personal Data only in accordance with Customer's documented instructions, unless required by applicable law to act without such instructions.— Excerpt from Google Ads's Google Ads Data Processing Terms
1) REGULATORY LANDSCAPE: This provision directly implements the GDPR Article 28(3)(a) requirement that a processor process personal data only on documented instructions from the controller. Where Google is required by EU or Member State law to process data without instructions, GDPR Article 28(3) requires Google to inform the controller of that legal requirement unless prohibited from doing so. The relevant enforcement authority is the applicable EU supervisory authority or UK ICO. 2) GOVERNANCE EXPOSURE: Medium. The advertiser's legal exposure depends on the accuracy and completeness of its documented instructions. Advertisers using features such as enhanced conversions, Customer Match, or remarketing audiences must ensure their instructions and data sharing practices align with their lawful basis and privacy disclosures. 3) JURISDICTION FLAGS: EU and UK advertisers face heightened exposure because the instruction requirement is a mandatory GDPR Article 28 element. Failure to document instructions adequately could undermine the legal basis for processing and create regulatory exposure during supervisory authority audits. 4) CONTRACT AND VENDOR IMPLICATIONS: Procurement teams should evaluate whether the advertiser's implementation of Google Ads tags, conversion tracking pixels, and audience upload features constitutes adequately documented instructions. Instructions may be embedded in platform configuration rather than a separate document, which may be difficult to evidence during regulatory review. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should maintain records documenting the specific Google Ads features enabled, the categories of data inputs configured, and the purposes for which each is used, to satisfy the documented instructions requirement and support GDPR Article 30 records of processing activities.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 10 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This clause establishes that the advertiser's documented instructions govern the scope of Google's processing activities. It places on the advertiser the obligation to provide clear, complete, and lawful instructions, and any processing outside those instructions would constitute a potential breach of the agreement.
This provision establishes that personal data processed through Google Ads is limited to the advertiser's instructions, meaning the categories of data processed and the purposes for which it is used are determined by the advertiser's configuration of Google Ads features and data inputs.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Google Ads.