Avaya has this week announced that it has received Binding Corporate Rules (BCR) approval as both a data controller and data processor, making Avaya one of the first companies in its sector to achieve this approval from the European Union data protection authorities.
BCRs are internal rules covering data transfers within multinational companies, wherever that data is located geographically. Attaining BCR compliance demonstrates the company’s commitment to upholding fundamental privacy principles such as data security, quality and transparency. Avaya has received BCR approval both as a controller, and as a processor of personal data, meaning that the approval spans all Avaya’s personal data handling practices.
“Successfully completing BCR compliance is a testament to the standards Avaya has set in handling personal data and in upholding fundamental privacy principles, such as data security, quality and transparency. Protecting the personal data of our stakeholders will always be a top priority for Avaya and this endorsement demonstrates that we are committed to achieving the highest standards,” said Koldo Loidi, Global Data Privacy Officer, Avaya.
Avaya also announced that it is introducing new Data Processing Agreements for all customers and partners covered by the General Data Protection Regulation (GDPR), the new statutory framework for data protection in the EU, which comes into effect in May 2018. These agreements fulfil all legal requirements under GDPR, giving customers and resellers the necessary contractual rights to be in control of data entrusted to Avaya to process.
