Dear Customer,

As you are aware, there have been some new data privacy updates:

1. The European Commission (EC) released new Standard Contractual Clauses for international data transfers effective December 27, 2022.
2. The UK Information Commission also issued its own set of standard data protection clauses for international data transfers effective March 22, 2024. 
3. The California Privacy Rights Act and the Virginia Consumer Data Protection Act becomes effective January 1, 2023. 

Accordingly, RSA has updated its DPAs to include the regulatory updates, which are required for both parties to comply with all applicable laws and regulations, hence we trust there shall not be any objections.

No action is required, by continuing to do business with RSA past December 27, 2022, your DPA is automatically amended. 

Thank you for your prompt attention to this matter. If you have any questions or concerns regarding these updates, please email us at privacy@rsa.com.