Privacy, Data Transparency, and AI Trust Centre

A Transparency Tapestry for Responsible Data Processing

What is Personal Data?

Personal data is information that relates to an identified or identifiable individual natural person (“data subject”). Personal data includes information that can be associated with an individual, including data that can be used to identify, locate, track, or contact an individual.  Data that cannot be associated with an identified or identifiable individual, whether it was never associated with an individual (anonymous), or whether all identifiers or links to identifiers have been removed or aggregated in such a way that it is no longer possible to associate the data with an individual (anonymized) is not personal data.



Personal Data Use at Dun & Bradstreet

The ways in which we process personal data depend on the type(s) of data subject you are, such as your role in engaging with us, your role within your business or other organizations with which you are or have previously been associated, the nature of the products and services that we offer, and our data and analytics methodologies.


We provide Supplemental Personal Data Processing Statements about our personal data processing activities based on the following data subject groups:



Each of these Supplemental Personal Data Processing Statements forms a part of the disclosures in this Statement for purposes of the regulatory and framework obligations to which we are subject.


Archived Privacy Notices and Transparency Statements



Your Data Subject Rights


As detailed in our Global Data Subject Rights Policy, we are committed to respecting the data and digital rights of natural persons in both their personal and professional capacities. In accordance with that Policy and applicable laws, we strive to honor the following data subject rights in accordance with well-established public policy principles for individual participation related to data processing and protection, our ethical principles of Respect and Responsibility set forth in our Code of Conduct and Ethics, rights enshrined in applicable laws, and the value we place on the protection of human rights and civil liberties.



Right to Know
 Individual natural persons have the right to know whether D&B processes personal data about them, for what purposes, and other information as required by law.
Right of Access
 Individual natural persons have the right to access the specific personal data D&B processes about them and other information as required by law.
Right of Correction
 Individual natural persons have the right to correct, update, amend and/or supplement inaccurate personal data that D&B processes about them.
Right of Deletion
 Where D&B does not have a legitimate business need to process data about an individual natural person, or where the rights or risk of harm to an individual natural person outweigh D&B’s business need, such individuals have the right to deletion of the data D&B processes about them in accordance with applicable law.
Right to Object
 D&B provides direct communications to individuals in accordance with applicable laws. Individual natural persons have the right to object to D&B processing personal data about them and to receiving marketing and certain other commercial communications from D&B.
Right to Opt-Out of Commercial Communications
 D&B will honor opt-out requests from individual natural persons related to marketing and other forms of promotional, advertising, or commercial communications.
Right to Opt-Out of Data Sale
 Where required by law, D&B will honor specific requests of individual natural persons to opt-out of the sale of personal data about them, including information that identifies them in the products and solutions that D&B licenses to its customers and that is not otherwise publicly available.
Right to Opt-Out of Data Sharing with Third Parties for Online Advertising
 If D&B shares data with Third Parties, where permitted by applicable law, for cross-context behavioral advertising or other forms of targeted advertising, D&B will provide and/or utilize readily accessible online mechanisms to enable individuals to opt-out of such data sharing.
Right to Withdraw Consent
 If D&B processes data about individuals based on their consent, D&B shall provide transparent and accessible mechanisms for withdrawal of consent that are as easy to use as the method for providing consent.
Right to Restrictions
 Individual natural persons have the right to request that D&B restrict how it processes personal data, including any sensitive data, about them.

You may exercise your data subject rights in connection with our data processing here. Consistent with our Code of Conduct and Ethics, D&B will not retaliate nor discriminate, nor tolerate any retaliation or discrimination, against any individual who exercises rights provided by D&B under our Global Data Subject Rights Policy or applicable law. Unless a shorter timeframe is required by law or a regulatory or legal obligation applicable to D&B, or an extension is needed and permitted in accordance with applicable laws, D&B will honor requests received pursuant to this Statement and the Policy as soon as practicable and in accordance with the timelines under applicable laws. Except where required by law or a legal or regulatory obligation applicable to D&B, we will not honor multiple or repeated requests from the same individual to exercise the same right more than once every three months.



Personal Data Sharing and Disclosure

In general, we share data, including personal data, in the following ways:


  • With other D&B companies, including subsidiaries, parent companies, and affiliates within the D&B corporate group of companies, including other markets in which we have operations, and in accordance with our Consistent Global Standards.
  • With members of the D&B worldwide network, which are independent providers of business information around the world with whom we have entered into commercial agreements, including data protection agreements, to support sourcing of data globally as well as distribution of D&B products in the worldwide network markets.
  • With our customers, which are businesses and other organizations with whom we enter into agreements to license or access our data via our products and services.
  • With authorized resellers whom we permit to resell our products and services.
  • With our service providers, including our subcontractors and subprocessors as necessary to help us carry out our business activities. Service providers that function as data processors, whether supporting our data processing or supporting our data processing on behalf of our customers or others, are only authorized to process necessary personal data as specifically directed by us.
  • With other business partners with whom we may enter strategic relationships to co-develop, co-market, or co-sell certain products, solutions, services, or events. We only permit business partners to process personal information we share as agreed upon by us.
  • Through third party cookies and related online technologies that are used by third parties to evaluate use and help us manage the performance of our online services, and for advertising purposes. Please refer to our Cookie Policy for more information.
  • Where required by law or for safety or fraud prevention, such as in the case of law enforcement seeking information; regulatory agencies investigating a complaint; other form of government investigation, including requests from national security agencies; in response to a court order; in order to investigate, prevent, or take action regarding suspected or actual prohibited activities, including but not limited to fraud and situations involving potential threats to the physical safety of any person; to exercise, establish, or defend our legal rights; to protect your vital interests or those of a third party; or as explicitly required under the provisions of an applicable law or regulation. In responding to such requests, we will limit the information we provide to the extent necessary to meet the requirements of the request.
  • In connection with mergers, acquisitions, divestitures, and asset sales where the acquiring organization agrees to protections comparable to those set forth in this Statement.
  • With other third parties with your consent or authorization in accordance with applicable laws.


Where we disclose personal data about specific data subjects in unique ways, additional information is provided in our Supplemental Personal Data Processing Statements.



Our Code of Conduct and Ethics for Third Parties

We expect others who work on our behalf to demonstrate the same commitment that we have made to high ethical standards. Our “third parties” include our suppliers, data providers, vendors, service providers, subprocessors, agents, distributors, business partners, consultants, contractors, licensees, and members of the Dun & Bradstreet Worldwide Network. We consider each third party to be an extension of Dun & Bradstreet and expect them to conduct business honestly and with integrity. We also expect our third parties to choose subcontractors that share our values and our commitment to conduct business legally, ethically and in accordance with all contractual obligations.


View our Code of Conduct and Ethics for Third Parties.