Swift on data protection
Swift has decided to enhance its contractual documentation and to improve transparency with respect to the processing of message and traffic data. In doing so, Swift has been assisted by a working group of data protection and compliance experts from European and non-European Swift users.
The results from this work are published below.
Swift Personal Data Protection Policy
The Personal Data Protection Policy sets out the roles and responsibilities of Swift, the Swift community, and its customers with regard to the processing of personal data. Such roles and responsibilities were previously governed by the Swift General Terms and Conditions and other contractual documents, and are now consolidated in one single policy.
Swift Data Retrieval Policy
The Data Retrieval Policy sets out Swift’s policy on the retrieval, use, and disclosure of traffic and message data. This policy existed already, but has been enhanced to provide additional transparency.
Swift Ad Hoc Clauses
The Swift Ad Hoc Clauses provide an adequate level of protection to transfer messages sent by its European zone customers to its Trans-Atlantic zone customers. These clauses specifically cover personal data contained in message data that relate to individuals resident of European Economic Area (“EEA”) Member States or from Switzerland or that are sent by Swift customers established in one of the EEA Member States or Switzerland
Swift Pseudonymised Account Statistics
At Swift, we continuously work to enhance the safety and efficiency of our financial messaging services. In this information notice we describe how S.W.I.F.T. SC processes personal data that may be contained in financial messages to detect anomalies and increase the efficiency of payment transactions.
