Other Covered Entities

All wholly-owned AECOM U.S. subsidiaries are covered by this certification


  • Design and Construction
  • Design and Construction Services
  • Architecture Services
  • Design and Construction
  • Design and Construction Services
  • Architecture Services
  • Design and Construction
  • Design and Construction Services
  • Architecture Services


EU-U.S. Privacy Shield Framework: Active

Original Certification Date: 3/2/2017
Next Certification Due Date: 9/23/2020
Data Collected: HR, NON-HR

Purpose of Data Collection

AECOM is a global network of experts working with clients, communities and colleagues to develop and implement innovative solutions to the world's most complex challenges. Worldwide, AECOM designs, builds, finances, operates and manages projects and programs that unlock opportunities, protect our environment and improve people's lives. In the regular course of business, AECOM acquires personal information by interaction and communication with current, former and prospective employees, clients and other third parties. AECOM collects, uses, and processes this information in order to service its global customers. AECOM uses a limited number of third-party service providers to assist us in providing our services. AECOM maintains contracts with these third parties restricting their access, use and disclosure of personal data in compliance with our Privacy Shield obligations. AECOM also collects, uses, and processes personal information of AECOM employees that are citizens of or reside in the EU/EEA for general human resource purposes.

Privacy Policy

HR Data

Employee Privacy Notice

Employee privacy notice

Effective Date: 9/30/2016

Non-HR Data


AECOM Privacy Statement, for non-employee data

Effective Date: 2/3/2020

Verification Method


Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact AECOM at:

Whitney McCollum
VP, Asst. GC, Data Privacy & Technology
San Francisco
1999 Avenue of the Stars #2600
Los Angeles, California 90067

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from AECOM to your question or complaint, please contact the independent recourse mechanism listed below


Appropriate statutory body with jurisdiction to investigate any claims against AECOM regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission