Industries

  • Information and Communications Technology

Participation

UK Extension to the EU-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 10/16/2023
Next Certification Due Date: 11/12/2024
Data Collected: NON-HR

EU-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 12/2/2016
Next Certification Due Date: 11/12/2024
Data Collected: NON-HR

Swiss-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 12/7/2017
Next Certification Due Date: 11/12/2024
Data Collected: NON-HR

Purpose of Data Collection

This certification applies to certain IBM designated Infrastructure-as-a-Service, Platform-as-a-Service, Software-as-a-Service, and other hosted cloud services offered by IBM in which IBM acts as a data processor on behalf of our clients, which act as data controllers. A list of the cloud offerings covered by this certification is available through our IBM Data Privacy Framework Policy for Certified IBM Cloud Services. The purposes for which we process data on behalf of our clients vary by product and are provided in the pertinent offering agreements and may include providing the offering and related services; improving the offering; and for other purposes reflected in the agreements. Data may be disclosed to third parties as outlined in our IBM Data Privacy Framework Policy for Certified IBM Cloud Services and offering agreements.

Privacy Policy

Non-HR Data

Description:

The IBM Data Privacy Framework Policy for Certified IBM Cloud Services reflects the privacy practices applicable to the offerings that are certified under the Data Privacy Framework, and is available through the link provided above.

Effective Date: 11/3/2023

Verification Method

Self-Assessment

Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact International Business Machines Corporation (IBM) at:

Samuel Cerone
VP Regulatory Compliance
International Business Machines Corporation (IBM)
1 New Orchard Rd Ste 1
Armonk, New York 10504-1722

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from International Business Machines Corporation (IBM) to your question or complaint, please contact the independent recourse mechanism listed below


NON-HR RECOURSE MECHANISM



Appropriate statutory body with jurisdiction to investigate any claims against International Business Machines Corporation (IBM) regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission