Skip to Contact an Expert Skip to Main Content
First Data
  • Corporate
  • Financial Institutions
  • Merchants
  • Item 1 of 3, Corporate
  • Item 2 of 3, Financial Institutions
  • Item 3 of 3, Merchants
Binding Corporate Rules

Binding Corporate Rules

PLEASE NOTE: First Data was acquired in 2019 by Fiserv. The change in corporate ownership does not impact the applicability of the Binding Corporate Rules (BCRs), which remain in force relating to the activities of companies listed in the membership documents posted below. The contents of this page, and of the BCRs themselves, will be updated when appropriate. Should you have any queries or concerns about the BCRs, as to their continued effectiveness or otherwise, please contact dpo@fiserv.com.​

​Binding Corporate Rules express our commitment to privacy. BCRs are a legally binding agreement with the Data Protection Authorities of the EU member states and the UK to uphold standards of data protection in connection with providing services to our data subjects (individuals) and clients. BCRs facilitate the transfer of Personal Data internationally to our affiliates in compliance with EU and UK data protection law.​

​Both the EU and the UK currently recognize two kinds of BCRs: Controller BCRs and Processor BCRs. Our Controller BCRs enable us to transfer Personal Data that we control (for example, employee information) between BCR members. Processor BCRs enable us to make global transfers of personal data that we process on behalf of our clients from the EU and the UK to other locations. ​

BCRs provide confidence to employees, clients and data subjects that their Personal Data is being processed using legally binding standards. BCRs offer a competitive advantage over other processors without this approval.​

​BCRs do not override client contracts or local laws and regulations, so any restrictions contained in those documents and laws still apply.​

​Additional information can be found within the following documents, which are posted below:​

  • ​A copy of both our processor and controller BCRs ​for each of the EU and the UK
  • A listing of the entities that are members of each set of BCRs for the EU and the UK

EU Binding Corporate Rules

Full EU Controller Binding Corporate Rules
Download PDF
List of entities that have signed an IGA for​ EU Controller BCRs
Download PDF
Full EU Processor Binding Corporate Rules
Download PDF
List of entities that have signed an IGA for​ EU Processor BCRs
Download PDF

UK Binding Corporate Rules

Full UK Controller Binding Corporate Rules
Download PDF​
List of entities that have signed an IGA for​ UK Controller BCRs
Download PDF​
Full UK Processor Binding Corporate Rules
Download PDF​
List of entities that have signed an IGA for​ UK Processor BCRs
Download PDF​
  • Privacy
  • Binding Corporate Rules
  • Cookies

Company

  • Item 1 of 6, Fiserv.com
  • Item 2 of 6, About
  • Item 3 of 6, Careers
  • Item 4 of 6, Investors
  • Item 5 of 6, Press
  • Item 6 of 6, Privacy

SMB Merchant Sites

  • Item 1 of 4, United Kingdom
  • Item 2 of 4, Poland
  • Item 3 of 4, Germany
  • Item 4 of 4, Austria

Enterprise Merchant Solutions

  • Item 1 of 3, United Kingdom
  • Item 2 of 3, Germany, Austria & Swizterland
  • Item 3 of 3, Poland

Financial Institutions

  • Item 1 of 8, France
  • Item 2 of 8, Germany
  • Item 3 of 8, Middle East
  • Item 4 of 8, Poland
  • Item 5 of 8, South Africa
  • Item 6 of 8, Spain
  • Item 7 of 8, United Kingdom
  • Item 8 of 8, More in Europe

© 2023 Fiserv, Inc. or its affiliates.

All trademarks, service marks, and trade names referenced in this material are the property of their respective owners.

Site Selector