On July 16th, 2020 the European Court of Justice ("CJEU") invalidated the EU-US Privacy Shield. Please refer to the attached document for further information.
As a consequence, Sugar has updated its data processing agreement which can be found under https://support.sugarcrm.com/Resources/Master_Subscription_Agreements/SugarCRM_Data_Processing_Agreement/