GDPR
General Data Protection Regulation
How does Itron manage your solutions?
What is GDPR?
The General Data Protection Regulation ("GDPR") was enacted by the EU Parliament to "harmonize data privacy laws across Europe, to protect and empower all EU citizens and to reshape the way organizations across the region approach data privacy." The GDPR protects individuals who are under the jurisdiction of the European Economic Area ("EEA") and therefore applies to the processing of their personally identifiable information ("PII") by Itron, its customers, and its suppliers worldwide.
Itron and GDPR
Itron's privacy program identifies, inventories, and assesses
risks relating to the collection, processing, storage, analysis,
and transfer of PII of its employees, customers, and end-users,
including individuals who are within the jurisdiction of the EEA
and subject to the GDPR. For these purposes, Itron maintains and
maps records of data processing activities and assets. Itron
also produces data privacy impact assessments
("DPIAs") as warranted.
Itron has created and implemented appropriate technical and
organizational measures ("TOMs") to protect
confidential information, including PII, and ensure the
security, integrity, and availability of Itron's products and
services. Itron pursues privacy-by-design, as set forth in the
GDPR, throughout its network architecture and solutions from end
to end, supporting its policy of establishing systems that
ensure data protection from the outset, rather than as an afterthought.
Itron pursues the best practices set forth in the Generally
Accepted Privacy Principles ("GAPP") framework. These
practices include, but are not limited to, identity access
management, disaster recovery and business continuity,
information security training of all Itron personnel, and a
documented incident response program. In addition, Itron
maintains business policies and procedures to ensure the
continued safety and security of its facilities, systems, and
data, including physical protection mechanisms.
Itron's business processes and procedures align to a broad
set of reference information security control frameworks that
include but are not limited to ISO-27001 and SOC 2 Type 1 and
Type 2. Itron regularly tests its internal systems, operations,
and customer and end-user interfaces to ensure that it can
rapidly and effectively identify, manage, and respond to risks
as they arise.
If you have any questions, please contact Itron's Global
Privacy Office at privacy@itron.com.