Skip to Content

Capgemini announces its Binding Corporate Rules certification; a global data privacy compliance program covering both its clients’ and its own personal data

15 Mar 2016

This approval covers all Capgemini Group entities processing personal data and all Capgemini activities and business lines that involve the processing of its clients’ personal data. Built as an internal global data privacy compliance program which is fully integrated into the Group’s Cybersecurity and Information Protection program, the BCRs are intended to ensure that personal data is granted a uniform level of protection and security wherever it travels within the Group.

BCRs will also give the means to Capgemini, as well as its clients, to process and transfer personal data in full compliance with the upcoming EU General Data Protection Regulation1 that is due to impose enhanced obligations on companies and public entities when processing personal data.

“BCRs are a key business differentiator for Capgemini as we are now one of the very few global players in our industry to have BCRs approved both as data controller and data processor. By putting in place the appropriate policies, security measures, awareness campaigns and audit programs, Capgemini is offering its clients the highest standards currently available in the market,” said Paul Hermelin, Chairman and CEO of the Capgemini Group. “Capgemini is committed to providing its clients, partners and employees with a trustworthy and seamless environment.”

BCRs form a global privacy compliance program approved by one data protection authority acting on behalf of the 28 Data Protection Authorities of the European Union. They enable multinational companies to transfer personal data seamlessly within their group companies and in particular to those located outside of the EU. In order to receive approval, companies must provide evidence, to the satisfaction of the EU data protection authorities, that they have put in place the adequate organisation, procedures and means to ensure effective protection of personal data within the entire group.

– ENDS – 

1 The EU General Data Protection Regulation is intended to adapt the current 20 year old legislation to the new technological challenges and to build a more uniform set of rules within the EU. Its final adoption is scheduled for June 2016 and companies will have two years to implement its provisions

About Capgemini

With more than 180,000 people in over 40 countries, Capgemini is one of the world’s foremost providers of consulting, technology and outsourcing services. The Group reported 2015 global revenues of EUR 11.9 billion. Together with its clients, Capgemini creates and delivers business, technology and digital solutions that fit their needs, enabling them to achieve innovation and competitiveness. A deeply multicultural organisation, Capgemini has developed its own way of working, the Collaborative Business ExperienceTM, and draws on Rightshore®, its worldwide delivery model.

Rightshore® is a trademark belonging to Capgemini