List of companies for which the EU BCR cooperation procedure is closed

Updated on 24 May 2018

Company name Lead authority ABN AMRO Bank N.V. Dutch DPA

ADIENT Belgian DPA

ADP (Controller and Processor) Dutch DPA

AGCO (Controller) DPA of Bavaria (DE)

Airbus (Controller) CNIL (FR)

Air Liquid (Controller) CNIL (FR)

Allianz (Controller) DPA of Bavaria (DE)

AMGEN CNIL (FR)

Astra Zeneca plc ICO (UK)

Accenture ICO (UK)

Akastor ASA (Controller) Norwegian DPA

Aker Solutions ASA (Controller) Norwegian DPA Akzo Nobel N.V. Dutch DPA (Controller) Align Technologies B.V. Dutch DPA (Controller and Processor) American Express ICO (UK)

Arcadis (Controller) Dutch DPA

ArcelorMittal Group Luxemburg

Atmel ICO (UK)

Atos (Controller and Processor) CNIL (FR)

AVAYA Group (Controller and Processor) DPA of Hessen (DE)

AXA CNIL (FR)

Axa Private Equity CNIL (FR) BakerCorp International Holdings Inc. Dutch DPA (Controller)

BMC Software(Controller and Processor) CNIL (FR)

BMW DPA of Bavaria (DE)

BNP Paribas SA (Controller) CNIL (FR)

Box, Inc (Controller and Processor) ICO (UK)

BP ICO (UK)

Bristol Myers Squibb CNIL (FR)

BT Group plc (Controller and Processor) ICO (UK)

CA plc (trading as CA Technologies) ICO (UK)

Capgemini (Controller and Processor) CNIL (FR)

Cardinal Health, Inc. IDPC (MT)

Care Fusion ICO (UK)

Cargill, Inc. ICO (UK)

Christian Louboutin SAS (Controller) CNIL (FR)

CISCO Dutch DPA

Citigroup ICO (UK)

CMA-CGM CNIL (FR)

Continental Group DPA of Lower Saxony (DE)

Corning (Controller) CNIL (FR)

Danfoss A/S Danish DPA D.E. Master Blenders 1753 ("DEMB"), ex-Sara Lee International B.V., (indirect subsidiary of Dutch DPA Sara Lee Corporation) Deutsche Post DHL BfDI (DE)

Deutsche Telekom BfDI (DE)

DNV GL (Controller) Norwegian DPA DocuSign (Controller and Processor) Irish DPA

DSM Dutch DPA

e-Bay Luxemburg

ENGIE (ex GDF SUEZ; Controller) CNIL (FR)

Ericsson AB Swedish DPA

Ernst & Young ICO (UK)

Festo Group DPA of Baden-Württemberg

First Data Corporation (Controller and ICO (UK) Processor)

Fluor Corporation Inc. ICO (UK)

Flextronics International Ltd ICO (UK)

General Electric (GE) (Controller and Processor) CNIL (FR)

Giesecke & Devrient (Controller and Processor) DPA of Bavaria (DE)

GlaxoSmithKline plc ICO (UK)

Hermès CNIL (FR)

HP Enterprise (Controller) CNIL (FR)

Hewlett Packard Inc. (Controller and Processor) CNIL (FR)

Hewlett Packard Enterprise (Processor) CNIL (FR)

Hyatt ICO (UK)

International Business Machines Corporation ICO (UK)

IMS Health Incorporated ICO (UK)

ING Bank N.V. Dutch DPA

Intel Corporation DPA Ireland

International SOS CNIL (FR)

ISS Group (Controller) Danish DPA

Itera ASA (Processor) Norwegian DPA John Deere DPA of Baden-Württemberg

Johnson Controls Belgian DPA

JPMC ICO (UK)

Kongsberg (Controller) Norwegian DPA

Koninklijke DSM N.V. and affiliated companies Dutch DPA

Kvaerner ASA Norwegian DPA

Latham & Watkins LLP (Controller) ICO (UK)

LeasePlan Corporation N.V. (Controller) Dutch DPA

Ledvance DPA of Bavaria (DE)

Lego Group Danish DPA

Legrand (Controller) CNIL (FR)

Linkbynet (Controller and Processor) CNIL (FR)

Linklaters ICO (UK)

LVMH CNIL (FR)

Maersk Group Danish DPA

Marsh and McLennan Companies Inc. ICO (UK) (Controller and Processor)

Mastercard (Controller and Processor) Belgian DPA

Merck Sharp & Dohme (MSD) Belgian DPA

Michelin CNIL (FR)

Motorola Mobility LLC ICO (UK)

Motorola Solutions, Inc. ICO (UK)

NetApp Inc. (Controller) Dutch DPA

Norsk Hydro (Controller) Norwegian DPA

NOVARTIS CNIL (FR)

Novo Nordisk A/S Danish DPA Nutreco N.V.(Controller) Dutch DPA

Oracle EMEA Ltd (Processor) Irish DPA

Osram DPA of Bavaria (DE)

OVH CNIL (FR)

PayPal Luxemburg

Rabobank Nederland Dutch DPA

Rakuten Luxemburg

Rockwool Danish DPA

Royal Philips Electronics Dutch DPA

Safran CNIL (FR)

Salesforce (Processor) CNIL (FR)

Sanofi Aventis CNIL (FR)

Schlumberger Ltd. Dutch DPA

Schneider Electric CNIL (FR)

Shell International B.V. Dutch DPA

Siemens Group DPA of Bavaria (DE)

Simon-Kucher & Partners DPA of North Rhine-Westphalia (DE)

Société Générale CNIL (FR)

Sopra HR Software (ex HR Access; Controller CNIL (FR) and Processor)

Spencer Stuart ICO (UK) Starwood Hotels and Resorts (Controller) as from 15-10-2018 the Starwood BCRs are Belgian DPA terminated Statoil ASA (Controller) Norwegian DPA

Teleperformance (Controller and Processor) CNIL (FR)

TMF Group B.V. (Controller and Processor) Dutch DPA TNT Express (Controller) Dutch DPA

Total CNIL (FR)

Twilio Ireland Ltd (Controller and Processor) Irish DPA

UCB (Controller) Belgian DPA

Univar (Controller) Dutch DPA

UTC Belgian DPA

Verizon communications inc. (Controller and ICO (UK) Processor)

VMware International Limited (Processor) Irish DPA

Vopak (Controller) Dutch DPA

Workday (Processor) Irish DPA

Yara (Controller) Norwegian DPA

Zendesk International Limited (Controller and Irish DPA Processor)