This provision defines the permissible scope of Google's processing as limited to Customer's Instructions, which include the Agreement terms, platform settings and functionality, related technical support, and any additional written instructions formally acknowledged by Google.
This analysis describes what Google Ads's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the operational boundary of Google's processing authority over Customer Personal Data, directly relevant to GDPR Article 28(3)(a) requirements, and clarifies that Customer's use of platform settings and functionality constitutes a form of Instruction.
Interpretive note: The extent to which default platform settings constitute sufficiently specific Instructions under GDPR Article 28(3)(a) may require jurisdiction-specific legal assessment.
Under this provision, the scope of Google's permissible processing of Customer Personal Data is determined by how Customer configures and uses the Google Ads platform, including settings and functionality, meaning that platform configuration decisions by advertisers constitute binding Instructions governing data processing scope.
Cross-platform context
See how other platforms handle Customer's Instructions Scope and similar clauses.
Compare across platforms →"By entering into these Data Processing Terms, Customer instructs Google to process Customer Personal Data only in accordance with applicable law: (a) to provide the Processor Services and any related technical support; (b) as further specified via Customer's use of the Processor Services (including in the settings and other functionality of the Processor Services) and any related technical support; (c) as documented in the form of the Agreement (including these Data Processing Terms); and (d) as further documented in any other written instructions given by Customer and acknowledged by Google as constituting instructions for purposes of these Data Processing Terms.Excerpt from Google Ads's Data Processing Terms
REGULATORY LANDSCAPE: This provision engages GDPR Article 28(3)(a), which requires that a processor processes personal data only on documented instructions from the controller.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the operational boundary of Google's processing authority over Customer Personal Data, directly relevant to GDPR Article 28(3)(a) requirements, and clarifies that Customer's use of platform settings and functionality constitutes a form of Instruction.
Under this provision, the scope of Google's permissible processing of Customer Personal Data is determined by how Customer configures and uses the Google Ads platform, including settings and functionality, meaning that platform configuration decisions by advertisers constitute binding Instructions governing data processing scope.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Google Ads.