Company: BCS
Filing Date: 2025-02-13
Form Type: 20-F
Source: 0000312069-25-000114
Chunk: 353

Company: BARCLAYS PLC
Filing Date: 2025-02-13
Form: 20-F
Chunk 353
---
 |                  |                     |     |                                            |     |

Managing data privacy, security and resilience We have strict policies to protect privacy and keep data secure. Data privacy Most of the jurisdictions in which Barclays operates have privacy and data protection laws in effect. While these may vary in detail, generally they reflect internationally recognised privacy principles found in the UN’s Universal Declaration of Human Rights, the European Convention on Human Rights and the European Union’s Charter of Fundamental Rights. We strive to operate in accordance with these standards and recognise that respect for privacy rights is a key element of good corporate governance and social responsibility. We strive to be transparent about our use of personal information when delivering our products and services and acknowledge the responsibility we have for safeguarding privacy. As Barclays increasingly adopts digital solutions to deliver next-generation consumer financial services, we appreciate our clients, customers and others may wish to understand how this may impact the use of their personal information. A globally applicable Barclays Data Privacy Standard sets out what is expected of all Barclays businesses and functions when collecting, using and sharing personal information. To promote clear accountability, the Standard includes the requirement for each business to appoint an accountable executive who has ultimate responsibility for the processing of personal data within that business. An agreed assurance programme measures compliance with the Data Privacy Standard. Barclays colleagues must complete annual privacy training which is reviewed and refreshed each year, with additional tailored training provided as necessary. The Group Data Protection Officer (DPO) reports on data privacy issues to the highest level of management. Through client, customer and employee privacy notices, we endeavour to explain clearly and openly how and why we use personal information and the legal grounds we rely on. When we receive complaints we seek to address them fairly. Several jurisdictions also provide individuals with specific rights, such as the right to have access to or request deletion of their personal information. Barclays provides a public mailbox and secure channels via its website to enable individuals to make their privacy requests and receive responses from a dedicated team. Barclays requires its suppliers to comply with data protection and privacy laws, regulations and standards relevant to the jurisdictions in which they operate and relevant to any transferred personal data. Our requirements are set out and principally managed through our supplier contract templates, which require that suppliers commit to ensuring personal data shared with them is safeguarded and respected throughout the supply chain. Data security As detailed below, Barclays' Chief Security Office and Chief Information Security Office operate controls aimed at mitigating cybersecurity-related risks and understanding internal and external threats. Barclays deploys controls designed to protect its sensitive information and the data that has been entrusted to us by