Privacy & Cookie Policy

Following the recent invalidation of the EU-US Privacy Shield, BenevolentAI Group have implemented the Standard Contractual Clauses (SCC) as our lawful basis for data transfer.

We comply with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States. We have certified to the Department of Commerce that we adhere to the Privacy Shield Principles. If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/. We are also subject to investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).

Independent Recourse Mechanism (IRM) In compliance with the Privacy Shield Principles, BAI commits to resolve complaints about our collection or use of your personal information. EU individuals with inquiries or complaints regarding our Privacy Shield policy should first contact Us at:
‍

We have further committed to cooperate with the panel established by the EU data protection authorities (DPAs) with regard to unresolved Privacy Shield complaints concerning human resources data, de-identified/pseudonymised data sets and de-identified/pseudonymised patient level data, tissues/blood samples that may be transferred from the EU in the context of employment relationship, business operations and scientific research purposes.

We are committed to cooperate with the panel established by the EU data protection authorities (DPAs) with regard to unresolved Privacy Shield complaints concerning human resources data transferred from the EU in the context of employment relationship. As an EU Persons, you have the option to select binding arbitration under the Privacy Shield Panel for the resolution of your complaint under certain circumstances. For further information on this Framework, refer to the Privacy Shield website at: https://www.privacyshield.gov/EU-US-Framework

‍Under the Privacy Shield Policy, you have the rights to personal information that BAI Group holds about you as stated in “Your Rights” session above if it has been processed in violation of the Principles (except when the burden or expense of providing access, correction, amendment, or deletion would be disproportionate to the risks to the Data Subject’s privacy, or where the rights of persons other than the Data Subject would be violated). Requests can be sent to us using the contact information set out above.

Disclosure Under the Privacy Shield Framework As stated in our disclosure commitment above, your Personal Data are used solely for administrative (HR) purposes and you will be duly informed if your personal information is to be shared with other third parties for a new purpose outside the scope or is materially different from that for which it was originally collected. We will give you the opportunity to choose whether to have your Personal Data disclosed or opt-out. However, note that in certain circumstance where BAI Group might be required to disclose your Personal Information in response to lawful requests by public authorities, to meet national security or law enforcement or investigations, we will oblige accordingly.

‍Onward Transfers to Third Parties Before any onward transfer of your Personal Data to third parties, we will ensure measures are in place that meets the level of security appropriate to such onward transfer in terms of contract (SCCs/BCRs) or agreement as appropriate to ensure adequacy in line with the provision of the Privacy Shield Principles. We will ensure that any third party receiving such Personal Information from us has entered into a written agreement or contract with Us requiring that such third party provide at least the same level of privacy protection as the Privacy Shield Principles.We remain responsible and liable under the Privacy Shield tenets, if any such third-party processes such Personal Information in a manner inconsistent with the terms of this policy, unless BAI can prove that it is not responsible for the event leading to any breach. We will ensure that the third-party notify Us if it makes a determination that it can no longer meet the stated terms. The contract shall provide that when such a determination is made, they cease processing or take reasonable and appropriate steps to remediate so as to align the Privacy Shield Principles.