The EU General Data Protection Regulation (GDPR) will be in effect this month and we are excited to share how we are deepening our commitment to data privacy.
GDPR is a new European privacy regulation that will replace the 1995 EU Data Protection Directive. The goal of GDPR is to strengthen the security and protection of personal data and to place more stringent obligations on organizations who handle personal data no matter where the organizations are based. With growing awareness and concern for data safety, this regulation is designed to restore public confidence about how personal data is being utilized.
At PayScale we are committed to supporting you in ensuring that your use of our compensation management products meet the GDPR requirements.
Here are some of the measures that PayScale has put in place:
- We have prepared a Data Processing Addendum that contains the GDPR contractual requirements. To receive a copy of our Data Processing Addendum, simply email firstname.lastname@example.org.
- We are committed to maintaining appropriate technical and organizational security measures to protect your personal information in line with the GDPR requirements.
- We adhere to the E.U.-U.S. and Swiss-U.S. Privacy Shield frameworks (you can find our certification here), and we are committed to ensuring that all transfers of personal data are and will be in compliance with required international data transfer standards.
- For transparency and compliance, PayScale maintains a list of sub-processors. You can find more information here.
For more information on how GDPR impacts your organization, and how PayScale is dedicated to protecting your data, we invite you to visit our Data Protection page.