How does Intuit respond to government requests for information?

Neither Intuit nor Mailchimp voluntarily provides government agencies or authorities (including law enforcement) with access to or information about user accounts. However, on occasion, we may receive compulsory requests from government authorities for access to or disclosure of information from user accounts.

In order to demonstrate our commitment to privacy and our efforts to be as transparent as possible, Mailchimp publishes annual transparency reports (available here) to document the number and type of legal requests we receive. Mailchimp uses certain guidelines when responding to requests for information, whether from a government or non-government entity, and you may find more information here.

In accordance with Article 6 of the GDPR, we may need to respond to a request to comply with our legal obligations or because we have a compelling legitimate interest to respond. 

In our capacity as a data processor (with respect to accounts that reasonably appear to belong to customers in the EU), we strive to provide prior notice of any compulsory requests to access data from such accounts, unless we are prohibited by law from doing so or we have a reasonable belief that urgent access is necessary to prevent an imminent risk of serious harm to any individual, public safety, or our’s property, sites, or services.  

In addition, the Mailchimp DPA sets out the circumstances where we act as a data processor on behalf of our customer and may be required to disclose information to third parties in response to government data access requests. Please see Annex D of our DPA for further information.