For any use of ArcGIS Online, you must create user accounts, and the user profile data associated with them is stored in ArcGIS Online. This data is used to ensure security and provide you with the service, and is subject to the security and privacy controls described below. You can manage users by linking to an enterprise identity management system such as ADFS or by using the user management tools described in the previous section. In addition, when an organisation uses subcontractors, it must ensure that it takes and maintains the appropriate technical and organisational measures to meet the requirements of the GDPR and guarantee the rights of data subjects. For organizations considering using ArcGIS Online with EU personal data, an addition to data processing is available, which you can easily find in the ArcGIS Trust Center document repository by filtering data protection items. I could go on, but I thought it was worth highlighting some of our improvements and where we`re going, including supporting our customers in their GDPR requirements. As always, we welcome your feedback on our security and privacy efforts – SecureSoftware@Esri.com Typical ArcGIS on Premises delivery includes ArcGIS Enterprise components and ArcGIS desktop tools like ArcGIS Pro or ArcMap. If you manage personal data, it is likely that you also use a relational database (RDBMS) such as Oracle, SQL Server, or Postgres to store and manage that data. .