International Transfer Statement

Security & Safeguards · Company commitment

IGAs carry operating and security measures meant to keep protection in place after transfer

Bloomberg says the IGAs include the operational procedures and security measures it uses to maintain the accuracy and integrity of personal information and to protect it adequately. It also says the IGAs include safeguards meant to keep personal information protected to the standard applicable data protection laws require, including after it has been transferred overseas. The bullet items that follow in the Statement are presented as examples of these safeguards.

Supporting quotations

The IGAs include the operational procedures and security measures used by Bloomberg to maintain the accuracy and integrity of personal information and adequately protect personal information

The IGAs include the safeguards we put in place to ensure that personal information continues to be protected to a standard required under applicable data protection laws, including after it has been transferred overseas

Qualifications & exceptions

• Described as measures included in the IGAs; the Statement does not say how Bloomberg checks that importers follow them.
• The standard of protection is tied to what "applicable data protection laws" require.

Not stated here

• The specific operational procedures and security measures in the IGAs are not supplied beyond the bulleted summaries.

Security & Safeguards · Company commitment

Organizational, technical and physical security safeguards

Bloomberg says it invests in and maintains organizational, technical and physical safeguards intended to protect personal information, and that it engages in ongoing monitoring and testing of how effective they are. It also says its data centers are dedicated solely to its products, services and operations and have secure and monitored access controls.

Supporting quotations

We invest in and maintain organizational, technical, and physical safeguards

We engage in ongoing monitoring

Our data centers are dedicated solely to our

have secure and monitored access controls

Qualifications & exceptions

• The safeguards are described as "intended to" protect personal information; the Statement does not promise that protection will always succeed.
• The dedicated-data-center statement is about Bloomberg's own data centers; it does not mention third-party hosting.

Not stated here

• The specific controls, testing frequency and results are not stated.
• The Statement does not say whether any personal information is stored or processed outside the data centers it describes.