IBM uses Binding Corporate Rules (BCRs) in order to protect personal data (referred to as personal information) it controls; IBM’s Controller BCRs were approved by the European Data Protection Authorities in 2017. Below you can find a summary of our BCRs – if you would like a copy of the full BCRs please contact the IBM Chief Privacy Office at the following address: 1 North Castle Drive, Armonk, New York, 10504, U.S.A.