Integral Ad Science, Inc.
California Consumer Privacy Act (CCPA) Addendum

The following CCPA data protection addendum (the “CCPA Addendum”) forms an integral part of the standard terms and conditions available at https://integralads.com/terms-and-conditions/ the “Standard Terms”) as between Customer and Integral Ad Science, Inc. (“IAS”) for Customer’s use of IAS products and services (the “Services”) described in the Standard Terms or an Order Form. This CCPA Addendum governs the responsibilities of the parties with respect to the processing of personal information (defined below) which is subject to the CCPA (defined below) and is processed in the course of Customer’s use of the Services.  All undefined capitalized Terms herein shall have the same meaning as the Standard Terms, as applicable.

In the event of any conflict or inconsistency between the Standard Terms and this CCPA Addendum, this CCPA Addendum shall govern.

The most recent version of this CCPA Addendum is available at https://integralads.com/CCPA-Addendum-MSA-SOW-Clients/

  1. CCPA” means the California Consumer Privacy Act of 2018, as amended, and any regulations promulgated thereunder. The terms “aggregate consumer information”, “business”, “business purpose”, “deidentified information”, “personal information”, “processing”, “sell”, and “service provider” shall have the same meaning as in the CCPA.
  2. IAS and Customer agree that, as to processing of personal information as part of provision of the Services, IAS is a service provider and Customer is the business. Accordingly, except as otherwise permitted by the CCPA, IAS shall not:
    a. Sell the personal information, or
    b. Retain, use, or disclose the personal information for any purpose other than for the business purpose, including retaining, using, or disclosing the personal information for a commercial purpose other than providing the Services. 
  3. IAS shall not process the personal information other than on Customer’s documented instructions in the Standard Terms or Order Form, which include processing to detect data security incidents, protecting against fraudulent or illegal activity, creation of datasets of aggregate consumer information and deidentified information that IAS can compile and use for its other clients, appointing sub-processors, and any other business purpose or operational purpose permissible under the CCPA of a service provider that does not cause IAS to lose its service provider status (the “Documented Instructions”).
  4. personal information that IAS may be processing on Customer’s behalf.
  5. Subject to the terms set forth in the MSA, this CCPA Addendum and the CCPA, Customer acknowledges and agrees that IAS may use IAS affiliates and other sub-processors to process personal information to provide the Services on its behalf.
  6. If Customer is a publisher or platform, then Customer represents and warrants that the personal information being processed by IAS as part of the Services was collected by Customer under privacy notices that allow for IAS to process the personal information pursuant to the Documented Instructions.
  7. The CCPA remains subject to amendment and regulations that have not yet been promulgated, and other states and the United States Congress are considering similar laws (all of the foregoing, “New Privacy Laws“).  Each party agrees and warrants it will work together in good faith with the other party to amend this CCPA Addendum to address compliance with New Privacy Laws.