EPISODE 7: How Bisnode secures the GDPR compliant transfer of personal data

Transfer of personal data needs to be guarded by adequate security procedures. Any exchange of personal data in which Bisnode is involved deserves the utmost care and accountability. This encompasses all transactions in any direction: from Source Partner to Bisnode, from Bisnode to a customer and vice versa. 

Bisnode security procedures for personal data transfer 

• Bisnode uses the Secure File Transfer Protocol (SFTP) to exchange personal data files. Preferably we use the Bisnode EasyFile platform, which also enables transfer of files via https. In some very specific cases, and as an exception to the default SFTP/HTTPS process, we might consider some alternatives. Any exception has to be validated upfront by the Bisnode Security Director (or the Bisnode Service Manager).
• To access private data files each and every Bisnode partner or customer has to be registered. For each project they receive a specific conference name and a password.  
• All data sets containing ‘Personally Identifiable Information’ (PII data) must be sent encrypted, without exception.