What is the GDPR?
The General Data Protection Regulation is a privacy law in the EU with a broad impact on data privacy for companies around the world. Other laws like it are coming quickly, including in the US. The GDPR and similar laws globally require JMP to be proactive in how we collect, store, and use personal data, and it threatens strict penalties for non-compliance. For more information, please read about the GDPR and how it impacts JMP here.
What are data subject rights and what do I do if I’m contacts by a person who has questions, concerns or requests about data they believe JMP has on them?
Data subject rights refer to the legal entitlements individuals have under data protection laws—such as the right to access, correct, delete, or restrict the use of their personal data. If you are contacted by an individual with inquiries or requests related to their personal data, please contact jmplegal@jmp.com.
Where can I learn more about opt-in consent and GDPR for marketing?
In addition to the GDPR requirements for processing personal data, some geos also have laws that strictly govern how JMP may use personal data for marketing purposes. For example, in the EU and other geos, JMP must have opt-in consent from a prospect before we send marketing emails. Global guidance and training resources on these topics for JMP Marketing are available at GDPR & Privacy for Marketers.
May I send email addresses or customer names to a vendor or Partner?
The disclosure of customer email addresses or names to vendors or Partners is generally prohibited. Always review the specific contractual terms governing the individual’s data. If there is any uncertainty, contact the Legal at jmplegal@jmp.com for additional guidance.
Privacy 101
Any information relating to an identified or identifiable natural person. Any piece of information of any kind that can be associated with a specific individual is personal data. This includes business contact information, IP addresses, and even data that has had identifying data removed from it, so long as it is possible for anyone to re-identify the information.
- What does it mean to process personal data?
Anything you do concerning personal data constitutes processing - collecting it, accessing it, storing it.
- What is the difference between data subject, controller, and processor?
The data subject is the person that the information is about and is provided to the data controller.
A data controller is the owner of the data that determines the why and the how for processing personal data.
A data processor is the entity that performs the data processing on the controller's behalf.
- What is a Data Processing Agreement (DPA) and when is it required?
A DPA lays out the nature, purpose, and duration of the processing activities that will take place. It also specifies the type of personal data to be processed and the categories of individuals the data belongs to. It defines the rights and obligations the controller will have. A DPA is required for countries with applicable data protection laws, such as GDPR, including EEA, Switzerland, UK, and others (e.g., US states).
For more information see JMP Data Processing Addendum for Customers (available via JMP Trust Center).
- What is the JMP Trust Center and what is it used for?
JMP Trust Center contains information about JMP’s practices, policies, and procedures on privacy, security, quality, and compliance. There are sub-pages within the JMP Trust Center that point to specific information, including one for Privacy.
- What is a Privacy Statement and where can I find JMP’s?
As a wholly owned subsidiary of SAS, JMP falls under the umbrella of the SAS Privacy Statement.
