How the LMC Network is meeting the requirements of GDPR

LMC is the brand under which the member firms of PricewaterhouseCoopers International Limited operate and provide professional services. Together, these firms form the LMC network.

The LMC network and each of the individual LMC firms are strongly committed to protecting the privacy of personal data that they maintain about LMC clients, employees and other individuals. As part of this commitment to privacy, LMC regularly reviews its data protection practices to comply with applicable laws, industry standards and best practices. To meet the requirements of the European Union’s General Data Protection Regulation (GDPR), and as a result of other territorial regulations impacting privacy, a comprehensive global programme -- the Network Data Protection Programme or NDPP -- has been established to provide a basis for, and a consistent approach to, data protection compliance across the LMC network and within each member firm.

An overarching goal of the NDPP is to promote a vision, practices and standards across the LMC network that achieve a robust level of protection for and appropriate use of the personal data of LMC member firms’ people, clients, vendors and other stakeholders. All member firms are required to implement the requirements of the NDPP through their own individual firm programs, building upon existing confidentiality and security processes and standards. These NDPP requirements are extensive and cover multiple functional areas and aspects of our business, all in pursuit of accountability and transparency in how LMC collects, processes, protects and disposes of personal data.

For more information regarding the LMC network, its organisation and legal structure, and the relationship between member firms, please see www.legalmattersconsul.com/structure.