The ICO exists to empower you through information.

List of BCRs approved under UK GDPR

Group entity UK entity with delegated responsibility for UK BCRs Type Categories of data
AMGEN AMGEN Limited Controller
  • Employees
  • Healthcare
  • Professional
  • Vendors
  • Suppliers
  • Patients which may include children under 18 years of age in specified circumstances
ATOS ATOS IT SERVICES UK LIMITED Controller
  • Employees (past, current and future) and associated persons
  • clients (current and potential)
  • end-users of clients, providers and visitors.
ATOS ATOS IT SERVICES UK LIMITED Processor
  • employees (past, current and future) and associated persons
  • users
  • members
  • patients
  • students / pupils
  • clients (current and potential)
  • end-users of clients
  • visitors
  • providers
Capgemini Capgemini UK plc Controller
  • employees and dependents,
  • suppliers,
  • sub-contractors
  • shareholders
  • client or alliance partners.
Capgemini Capgemini UK plc Processor
  • clients and customers of the controllers
  • contact details of staff within the controller organizations.
Mastercard Mastercard Europe Services Limited Controller
  • Cardholders
  • other individual customers of Mastercard customers (e.g., issuing financial institutions, merchants, public sector bodies, partners and other businesses)
  • Mastercard customers,
  • Merchants
  • Suppliers
  • Vendors
  • Employees
  • Contractors
  • job applicants
Mastercard Mastercard Europe Services Limited Processor
  • Cardholders
  • other individual customers of Mastercard customers (e.g., issuing financial institutions, merchants, public sector bodies, partners and other businesses)

  • Mastercard customers,
  • Merchants
  • Suppliers
  • Vendors
  • Employees
  • Contractors
  • job applicants
Rakuten Group Inc Rakuten Marketing Europe Limited Controller
  • current and former employees (temporary and permanent) and their families
  • customers
  • merchants
  • contractors and
  • suppliers