{"id":18981,"date":"2021-06-11T12:47:20","date_gmt":"2021-06-11T11:47:20","guid":{"rendered":"\/gb\/en\/blog\/?p=18981"},"modified":"2021-06-15T21:13:57","modified_gmt":"2021-06-15T20:13:57","slug":"our-commitment-to-protecting-european-data-across-borders","status":"publish","type":"post","link":"\/gb\/en\/blog\/our-commitment-to-protecting-european-data-across-borders\/","title":{"rendered":"Our commitment to protecting European data across borders\u00a0"},"content":{"rendered":"

Earlier this month, the European Commission issued its long-awaited, updated \u2018Standard Contractual Clauses\u2019 (SCCs). The clauses represent the most frequently used mechanism to transfer personal data from the EU abroad, including to the US.\u00a0<\/span><\/p>\n

However, organisations can\u2019t rely on SCCs alone, they must carry out a case by case risk assessment when exporting personal data outside the EU.\u00a0<\/span><\/p>\n

How does this impact customers?<\/span><\/h2>\n

The European Commission\u2019s announcement doesn\u2019t change the commitment we have to our customers\u2019 data privacy and security. We are continuously looking for opportunities to update our practices in line with government and industry standards in Europe.<\/span><\/p>\n

On top of this, our partnerships with European industry leaders like <\/span>Atos<\/span><\/a> & <\/span>Alcatel Lucent Enterprise<\/span><\/a> helps us meet local customer needs.<\/span><\/p>\n

What additional safeguards are available to customers?<\/span><\/h2>\n

Here are some of the initiatives we are working on right now:<\/span><\/p>\n

Data transfer from the EU<\/strong><\/h3>\n

We rely on the new <\/span>EU Standard Contractual Clauses (SCC) as a data transfer mechanism, and we offer customers additional contractual safeguards in line with the EU Commission\u2019s recommendation; this includes protection for data exporters and redress for data subjects. We are also rolling out such safeguards to our sub-processors.<\/span><\/p>\n

Government requests<\/strong><\/h3>\n

Every request for disclosure is reviewed by our legal team. These rigorous reviews verify that all requests are legal and within the powers of the requesting public authority.\u00a0<\/span><\/p>\n

If, after a careful assessment, we conclude that there are grounds under the law to challenge the request, we exhaust all available remedies to do so. In any event, we are fully committed to inform our customers, unless prohibited by law, of any government request for disclosure of personal data. On top of this, we would use every reasonable effort to redirect the requesting third party to ask for the data directly from our customers.<\/span><\/p>\n

Finally, we always seek to provide the minimum amount of information permissible when responding to a request for disclosure.<\/span><\/p>\n

Security\u00a0<\/strong><\/h3>\n

We also protect customer data with the following additional safeguards:<\/span><\/p>\n