PwC's Data Privacy Framework Policy
Overview
PwC US Group LLP and its United States subsidiaries and affiliates using the PwC or PricewaterhouseCoopers brand name (“PwC”) comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively, the “DPF”). PwC has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S.DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. PwC has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit the U.S. Department of Commerce’s Data privacy framework website.
This notice applies to personal data within the scope of PwC’s DPF certifications, which cover the following categories of information:
- Personal data regarding current, former and prospective partners, principals and employees for the purposes of operating and managing our business and performing human resource administration and maintaining contact with such individuals.
- Personal data regarding current, former and prospective clients and their personnel, customers, or other data subjects for the purposes of delivering our services, maintaining ongoing relationships and performing business development activities.
- Personal data regarding our suppliers, service providers, and other third parties, and their personnel for the purposes of managing and administering our business relationships with such third parties.
- Personal data collected from members of the general public in order to answer inquiries or provide information requested.
Additional detail regarding our personal data collection, use and disclosure practices may be provided through other PwC privacy notices or direct forms of communication with appropriate parties, such as contracts or agreements. If there is any conflict between the terms in this notice or another applicable privacy notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles (collectively, the “DPF Principles”), the DPF Principles shall govern.
Accountability for Onward Transfers
Consistent with the DPF Principles, PwC may transfer personal data to third parties, including transfers from one country to another. We will only disclose an individual’s personal data to third parties under one or more of the following conditions:
- The disclosure is to a third party service provider in connection with the operation of our business and consistent with the purpose for which the personal data was collected. We require these third parties to provide at least the same level of data protection as is required by the DPF Principles. To the extent provided by the DPF Principles, PwC remains liable under the DPF Principles if a third party that it engages to process personal data on its behalf does so in a manner inconsistent with the DPF Principles, unless PwC proves that it is not responsible for the matter giving rise to the damage;
- With the individual’s permission to make the disclosure;
- Where required to the extent necessary to meet a legal obligation to which PwC is subject, including a lawful request by public authorities and national security or law enforcement obligations and applicable law, rule, order, or regulation;
- Where reasonably necessary for compliance or regulatory purposes, or for the establishment of legal claims.
Individual rights
As set forth in the DPF Principles, individuals may contact us to access their personal data processed in reliance on the DPF and to correct, amend or delete such personal data if it is inaccurate or has been processed in violation of the DPF Principles (except when the burden or expense of providing access, correction, amendment, or deletion would be disproportionate to the risks to the individual’s privacy, or where the rights of persons other than the individual would be violated). Individuals may also have the right to limit the use and disclosure of their personal data (opt out) under certain circumstances, such as marketing. Requests to access, correct, amend, delete, or limit the use and disclosure of personal data (opt out) may be submitted using our request form.
In compliance with the DPF Principles, PwC commits to resolve complaints about our handling of personal data received in reliance on the DPF. Individuals with such inquiries or complaints should first contact PwC's US Privacy Office. For any such complaints that PwC cannot resolve directly, PwC commits to cooperate and comply with (1) the advice of the respective panels established by the EU data protection authorities (DPAs), the UK Information Commissioner’s Office (ICO), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard our handling of human resources data received in reliance on the DPF in the context of the employment relationship; and (2) the International Centre for Dispute Resolution/American Arbitration Association (“ICDR/AAA”), an alternative dispute resolution provider based in the United States which may be contacted at https://go.adr.org/dpf_irm.html, with regard to our handling of any other personal data received in reliance on the DPF. The services of ICDR/AAA are provided at no cost to individuals. As further explained in the DPF Principles, binding arbitration may be available to address residual complaints not resolved by other means.
PwC is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.
Updates
PwC may update this notice at any time by publishing an updated version here, however we will not update this notice in contravention of the DPF Principles.
Last updated: May 2025
