How does SWIFT document its compliance with data protection laws?
SWIFT’s compliance with data protection laws is documented in its customer documentation. SWIFT has recently enhanced transparency of both its data processing operations and its compliance with data protection laws in the following documents: • the SWIFT General Terms and Conditions set out SWIFT’s confidentiality obligations. • the SWIFT Data Retrieval Policy sets out SWIFT’s policy on the retrieval, use, and disclosure of message and traffic data. • the SWIFT Personal Data Protection Policy sets out the roles and responsibilities of SWIFT and its customers with regard to the processing of personal data. • the SWIFT Safe Harbor Policy provides an adequate level of protection for SWIFT’s mirroring of data in its US OPC. • other relevant Service Documentation provides more information on how the different SWIFT messaging services work and on the security measures used by SWIFT to protect data.
