Privacy Notice
In order to pursue its mandate and mission, the Financial Stability Board (FSB) processes information about individuals (“Personal Data”). The FSB takes your privacy seriously. This Privacy Notice describes how the FSB collects and processes Personal Data, and how, in doing so, the FSB complies with its Personal Data Protection Policy.
What kind of personal data does the FSB collect and for which purpose?
The nature of the Personal Data the FSB collects depends on your relationship with the FSB. Typically, the FSB may process the following Personal Data: contact information (e.g. name, email, address, postcode, phone number); online information (e.g. cookies and IP address, if you visit the FSB websites); or contractual information (e.g. personal details in relation to services provided to the FSB).
The FSB collects and processes personal data only for the legitimate purposes set out herein below and only processes the Personal Data which are relevant to achieve these purposes.
What are the principles of the FSB Personal Data Protection Policy and the legitimate purposes for which the FSB processes personal data?
The FSB processes Personal Data in accordance with the following principles:
Lawfulness, Fairness and Transparency: The FSB shall process Personal Data for legitimate purposes, in a fair and transparent manner. Legitimate purposes for the processing of Personal Data are:
- Processing is required in order for the FSB to be able to carry out its mandate and mission, purpose and functions;
- Processing is necessary in order to protect the vital interests of a natural person;
- Processing is necessary to protect the interests of the FSB or its members;
- Processing is required for the performance of a contract to which the FSB is a party;
- Processing is necessary for compliance with the FSB policies procedures and rules;
- Processing is required for any other activity of the FSB and the individual has given their express consent for such processing.
Purpose Limitation: Personal Data shall be collected for one or more specified and legitimate purposes, and not further processed in a manner incompatible with those purposes.
Data Minimisation: Processing of Personal Data shall be adequate, relevant and reasonably limited to what is necessary in relation to the legitimate purposes for which Personal Data is processed.
Storage Limitation: The FSB shall retain Personal Data for the duration specified in its applicable retention schedule(s) adopted by the FSB.
Accuracy: Personal Data shall be recorded as accurately as possible and, where necessary, updated to fulfil the legitimate purpose(s) for which it is processed.
Integrity and Confidentiality: Personal Data shall be recorded as accurately as possible and, where necessary, updated to fulfil the legitimate purpose(s) for which it is processed.
Accountability: The BISFSB has established appropriate accountability and oversight mechanisms.
How long does the FSB keep your Personal Data?
Your Personal Data will be kept for as long as necessary to fulfil the purposes for which they were collected or to comply with legal or internal policy requirements. The FSB applies criteria to determine the appropriate periods for retaining your Personal Data depending on their purpose and in accordance with the FSB retention policies.
How does the FSB protect your Personal Data?
Your Personal Data are protected by appropriate technical and organisational safeguards against unauthorised processing and against accidental loss, destruction, damage, alteration, disclosure, access or use.
With whom and how does the FSB share your Personal Data?
The FSB may share your Personal Data with third parties (e.g. suppliers or service providers). The FSB will only transfer Personal Data to third parties where they comply with a standard of protection of Personal Data equivalent at least to the level of protection established by the FSB Personal Data Protection Policy.
What are your rights and how can you exercise them?
Right to access Personal Data: You may ask to obtain confirmation by the FSB as to whether or not your Personal Data is being processed, and, where they are processed. Your rights will be subject to the restrictions on the right to access under the FSB Personal Data Protection Policy.
Right to rectification: You may request correction of your Personal Data that you believe is inaccurate or incomplete.
The BIS oversees the FSB personal data rectification. You can exercise your rights to information or rectification by supplying a completed data subject request form in English to the Personal Data Protection Manager at [email protected] or via mail to
Bank for International Settlements
c/o Personal Data Protection Manager
Centralbahnplatz 2
CH-4002 Basel
Right to lodge a complaint: In the event that you believe that the FSB is not processing your Personal Data in accordance in a manner described in this Privacy Notice, you have the right to lodge a complaint to the BIS’ Personal Data Complaints Panel within 60 calendar days of becoming aware of the FSB failure to process Personal Data in accordance with its Personal Data Protection Policy..
In submitting your complaint, you must provide relevant information, including, but not limited to (i) the reasons why you believe that the FSB has failed to process your personal data in the manner described in this Privacy Notice, (ii) the date on which you were informed or became aware of the FSB failure, and (iii) the remedy being sought.
We ask that you supplement the complaint with (i) a copy of any relevant response to a request for information regarding the processing of your personal data and/or correction provided by the FSB and (ii) all relevant evidence.
The BIS oversees the FSB personal data complaints. You can exercise your right by submitting a data subject complaint by supplying a completed complaint form in English to the BIS Personal Data Complaints Panel at [email protected] or by mail to:
Bank for International Settlements
c/o Personal Data Complaints Panel
Centralbahnplatz 2
CH-4002 Basel
The BIS shall not accept or respond to anonymous complaints.
Failure to submit the complaint in accordance with requirements set out above may result in the complaint being rejected by the Personal Data Complaints Panel.
This information is also available as a PDF
