The Bedrock of Our Culture

Our Compass for Making Good Decisions

Accountable	Respectful	Responsible	Transparent	Courageous
Our Board of Directors and leadership consistently demonstrate the importance of doing business the right way and complying with our Code of Conduct and applicable laws and regulations.	We respect each other and the interests of the individuals and organizations we engage with and others about whom we process data.	We steward our assets and drive growth responsibly so that we can sustain D&B’s success into its third century and beyond.	We are transparent about our conduct, our dealings, and our practices; and we help support the global economy through transparent data practices, processing, and insights.	We encourage new ideas, innovation, and speaking up with questions or concerns, and we have zero tolerance for retaliation against those who raise compliance and ethics concerns.

We strive to build and maintain trust through an accountability-based compliance and ethics program that applies to our data processing globally. The following core policies provide the foundation for our program and serve as the basis for our certifications described below:

• Data Compliance and Ethics
• Privacy and Personal Data Protection
• Data Subject Rights
• Records Management and Data Retention
• AI Ethics
• Global Cross Border Privacy Management System
• Incident and Breach Response

Our program has been designed and audited for compliance with ISO 27701, Privacy Information Management Systems (PIMS). In markets in which we are certified as compliant with ISO 27001, Information Security Management Systems (ISMS), we also hold an ISO 27701 certification (PIMS).  These certifications are designated on the global ISO certifications page, where applicable.

Since 2016, we have upheld multilateral standards to provide assurance for how we manage our cross-border privacy and data protection obligations and to support our certifications under the following frameworks recognized by regulators:

• EU-U.S. Privacy Shield (2016)
• Swiss-U.S. Privacy Shield (2017)
• EU-U.S. Data Privacy Framework (2023)
• Swiss-U.S. Data Privacy Framework (2023)
• UK Extension to EU-U.S. Data Privacy Framework (2023)
• APEC Cross-Border Privacy Rules System (2023)
• TRUSTe Responsible AI Certification (2024) 
• Global Cross Border Privacy Rules (CBPR) (2025)

D&B is committed to treating consumers fairly, transparently, and responsibly. Our Consumer Protection Policy establishes principles that guide how we design products and services, communicate with consumers, provide meaningful choice, prevent foreseeable harm, and address concerns or complaints. These principles help ensure that the data, analytics, and solutions we provide support informed decision-making while maintaining trust and accountability.