We also ceased using Mail Chimp for a few of reasons.
Predominantly, as mentioned, due to Mail Chimp storing data in the US.
Another contributing factor was the 2021 case in Germany where a company was held to be in breach of GDPR by not undertaking thorough due diligence on Mail Chimp: https://www.natlawreview.com/article/bavarian-dpa-holds-sccs-alone-not-enough-european-use-us-email-service.
Note that the case turned on the fact that mere SCCs alone were not sufficient to guarantee adequate equivalent levels of data protection in the US. I think that the company did have SCCs in place but the Bavarian Supervisory Authority held that this did not go far enough to protect the personal data. We know that European data protection law is no longer binding in the UK, but assume it can still be influential to our own Supervisory Authority/courts.
We now use Campaign Master, who are a UK-based company, for the same task.
Best regards,
Lucynda Kelman | Assistant Data Protection Officer
LTE Group
The Manchester College | UCEN Manchester | Novus | Total People | MOL
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
An archive of messages is stored permanently at http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send an email to [log in to unmask] with no subject
and leave data-protection as the message body. This is an automated service.
Additional subscriber help is available at https://www.jiscmail.ac.uk/help/subscribers.html
Any other list queries can be emailed to [log in to unmask]
For general JISCMail queries please email [log in to unmask]
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|