Data Subject Complaint form
The Bank for International Settlements (“BIS”) operates a Data Subject Complaint process in accordancewith its Personal Data Protection Policy.

The BIS also processes Data Subject complaints that concern international associations hosted by theBIS (FSB, IADI, IAIS) on behalf of and in collaboration with the association concerned (“HostedAssociations”).

Any natural person (“Data Subject”) of which the BIS/Hosted Associations processes information about

the individual (“Personal Data”) and who considers that the BIS/Hosted Associations has failed to process

their Personal Data in accordance with the BIS Personal Data Protection Policy has the right to submit acomplaint to the BIS Personal Data Complaints Panel (“PDC Panel”).

For more information on the BIS Personal Data Protection Policy, see the BIS Privacy Notice available athttps://www.bis.org/privacy.htm.

The BIS also processes Data Subject complaints that concern international institutions hosted by the BIS(FSB, IADI, IAIS) on behalf of and in collaboration with the institution concerned (“Hosted Institution”).
Please submit this form in writing and in English to the PDC Panel at PDCPanel@bis.org or via mail toBank for International Settlementsc/o Personal Data Complaints Panel
Centralbahnplatz 2
CH-4002 Basel
Before raising a complaint, please check if the BIS Request Form is more suitable for your enquiry.
The complaint process comprises of three phases:

Phase 1: Submit complaint form to the PDC Panel•

Provide your details and (if applicable) details of your legal representative•State your complaintTime limits: You will need to submit your claim within 60 days of becoming aware of the BIS or the
Hosted Association’s failure to process personal data in accordance with the BIS Personal Data ProtectionPolicy.

Phase 2: The PDC Panel may request additional information to help process yourcomplaint•The PDC Panel may ask you or your representative for supporting documents to verify your identity,correspondence address, or authority of the legal representative (if any)

The PDC Panel may request additional information from you in accordance with the BIS Personal
Data Protection Policy and/or ask for clarification in cases where the complaint seems unclear orunspecific.
Please promptly provide additional information requested by the PDC Panel in order to enable theprocessing of your complaint.
•Phase 3: Processing of complaint and response•

The PDC Panel will acknowledge receipt of your complaint and will respond in writing and in English
to the Data Subject or its legal representative (if any) in accordance with the BIS Personal Data
Protection Policy.

Data Subject Complaint form

1/4

Data Subject Complaint form
Institution you are complaining against(please select only one; if you wish to raise
multiple complaints, please submit as aseparate form)

BIS

FSB

IADI

IAIS

Full Name of Data Subject
Email address(mandatory if the Data Subject Complaint issent by email)Postal address(mandatory if the Data Subject Complaint issent by post or delivery)

Telephone number
Nature of relationship or affiliation with theBIS (e.g. client, visitor, service provider,contractor, job applicant, employee)
Any unique reference or ID numbers or
specific details that would help the BIS toidentify you or your Personal Data.
Any system, platform, or website throughwhich you may have provided Personal
Data that would help the BIS identify yourPersonal Data
Please specify your complaint to the PDC Panel. Please include information on:

the reasons why you consider that the BIS or the Hosted Association has failed to process Personal Data inaccordance with the BIS Data Protection Policy;
the date on which you were informed or became aware of such a failure; andthe remedy being sought.
Please supplement your complaint with:a copy of any relevant response to any data subject request submitted to the BIS Personal Data ProtectionManager;
all relevant evidence.

Data Subject Complaint form

2/4

If the complaint is submitted by a legal representative, please also provide:
Name of legal representative
What is your relationship to the data
subject (e.g. lawyer)
Lawyer’s Office, if applicable
Postal address

E-mail address
Telephone Number
Confirmation of mandate and authority toact on behalf of the Data Subject(provide attachment if applicable)

The BIS may request additional information from you as legal representative to help confirm the Data
Subject’s identity. The BIS reserves the right to refuse to act on the complaint if the BIS is unable toidentify the Data Subject or verify your legal authority to act on the Data Subject’s behalf.

Signature and acknowledgement
The BIS will process information that is provided in the context of this complaint to identify the Data
Subject, to respond to the complaint and to keep a record of the complaint and our response.
Processing of such Personal Data will be carried out in accordance with the BIS Personal Data
Protection Policy.

Complaint submitted by the Data Subject

Please fill in this section if the complaint is submitted by the Data Subject directly
By signing this form, I confirm that the information provided above is correct.
Signature:

Print name:
Date:

Data Subject Complaint form

3/4

Complaint submitted by the legal representative

Please fill in this section if the complaint is submitted by the legal representative on behalf of the Data
Subject

By signing this form••I confirm that I am authorised to act on behalf of the Data Subject.
I understand that the BIS must confirm my identity and my legal authority to act
on the Data Subject’s behalf and may need to request additional verifying
information.

Signature:

Print name:
Date:

Please make sure you have:1.
2.

Completed this form

Signed the declaration above

Data Subject Complaint form

4/4