Johnson Controls takes privacy seriously and has a global privacy program designed with the most stringent global privacy and data protection laws in mind. We pride ourselves in standing up for the privacy of our customers, employees and suppliers and in protecting their personal data. This is true for all our handling of personal data including where such data needs to be transferred outside of the EU/EEA.

In June 2021, the European Commission issued modernized standard contractual clauses (SCCs) under the GDPR for data transfers from controllers or processors in the EU/EEA (or otherwise subject to the GDPR) to controllers or processors established outside the EU/EEA (and not subject to the GDPR). These modernized SCCs replace the three sets of SCCs that were adopted under the previous Data Protection Directive 95/46. Since 27 September 2021, it is no longer possible to conclude contracts incorporating these earlier sets of SCCs.

In line with this, Johnson Controls has incorporated the new SCCs into our Data Processing Addendum (DPA) and Global Data Processing Terms. These SCCs allow the transfer of personal data from the EU to other countries including the US. This applies to situations where Johnson Controls is for example, processing personal data for a customer or where a vendor is processing personal data on behalf of Johnson Controls.

Customers of Johnson Controls can therefore be reassured that any personal data transferred by Johnson Controls worldwide will continue to be protected using valid transfer mechanisms, including our Binding Corporate Rules (BCR) and the new SCCs. We have also renewed our existing Privacy Shield certification and will continue to do so until a replacement is agreed. All of this highlights our commitment to privacy and to offering our customers the strongest contractual protections available.

For further information on how Johnson Controls handles personal data please see our Privacy Notice.

For queries and concerns please contact the Johnson Controls Global Privacy Office via the Contact Us form.