Data Protection and Privacy
EU General Data Protection Regulation (GDPR)
GDPR harmonizes data protection regulation throughout the EU and gives individuals more control over their data.
Data Protection and Privacy Agreements
Learn about our rules and standards for the collection, processing and use of personal data, by SAP and our sub-processors.
Data Protection Management System
Learn how the data protection management system (DPMS) helps us achieve and maintain an effective and appropriate level of data protection and privacy at SAP.
EU General Data Protection Regulation (GDPR)
Data protection and GDPR
Listen to Birgit Hess, European lead for cloud information security awareness, discuss SAP’s experience after the EU general data protection regulation became effective.
GDPR implementation projects
Learn from Ksenia Tretjakova, SAP Consultant for technical security, explain how SAP initiates GDPR projects and discuss our implementation model.
SAP's approach to GDPR
Watch this interview with Volker Lehnert, Senior Director Data Protection S/4HANA to gain his expert insights on protecting personal data.
Data Protection and Privacy Policy and Processing Agreements
Data Protection and Privacy Policy
SAP's global policy outlines a standard for handling personal data. This policy helps us comply with applicable data protection and privacy laws. It defines requirements for processing and accessing personal data, and establishes clear responsibilities and organizational structures. This means that your data is safe with us.
Data Protection and Privacy Coordinators
You can trust our network of coordinators to monitor the collection, processing, and deletion of personal data, and maintain a constant high level of data protection and privacy standards within group affiliates and business areas.
Privacy at a Glance
What you need to know about SAP’s Data Protection and Privacy Policy. Learn how SAP respects and protects the rights of individuals, their information, and what regulations we comply with. The British Standards Institution has certified SAP processes regarding data protection and privacy.
Data Processing Agreement
SAP signs data processing agreements with each of our cloud services providers. These agreements mirror the terms of SAP’s customer-facing data protection agreement and include the standard contractual clauses (SCCs). SAP maintains a high standard for all vendors. This approach establishes a high level of data protection and privacy for our customers in the EU and beyond.
Data Protection Management System
Line of Business Data Protection Guidelines
Our data protection management system allows SAP to ensure compliant behavior across all our lines of business. We have a set of company-wide data protection guidelines, function-specific work instructions, and a worldwide network of data protection representatives.
Internal Data Protection
SAP regularly trains all employees and verifies a high level of data protection awareness with regular audits in more than 100 locations worldwide every year.
Data Protection Management System Certificate
Accredited by the British Standard Institution (BSI) of London, the certification is based on BS 10012, the standard for personal information management systems. Audit details and results are made available to all customer through the annual customer audit report.
Get the latest news and trends from the experts
SAP SuccessFactors
Highest standards of data protection and privacy
At SAP SuccessFactors, we have the pulse on shifting regulatory frameworks, and are committed to helping our customers comply with current regulations as well as what we anticipate future regulations will be.
SAP
ERP in the cloud: A key deciding factor for GDPR compliance
Even if you do not have customers in the European Union, chances are good that your customers do. Any hint of noncompliance anywhere in the value chain can impact your company.
SAP
Brief Introduction to data protection and privacy in S/4 HANA
This blog briefly describes the features S/4 HANA explicitly provides to support compliance with the relevant legal requirements and data protection.
