D&B Privacy Policy

This document is D&B's 'Privacy, Data and AI Transparency Statement' landing page, governing the company's data processing disclosures for Dun & Bradstreet entities operating in the U.S. and globally, grounded in its stated values of accountability, transparency, and responsible data stewardship. The statement asserts that D&B processes data on 600M+ organizations worldwide, aggregates and generates data including scores, ratings, and analytics, and commits to respecting individual data subject rights through a TrustArc-hosted rights request portal. Notably, the document discloses that D&B, Inc., Eyeota Pte. Ltd., and NetWise Data, LLC are each registered as data brokers in multiple U.S. states including California, Oregon, Vermont, and Texas, which is operationally distinct from standard enterprise software or SaaS privacy disclosures and places D&B squarely within data broker regulatory regimes. The document engages GDPR, CCPA and its CPPA enforcement regime, the EU-U.S. Data Privacy Framework, Swiss-U.S. Data Privacy Framework, UK extension thereof, APEC CBPR, ISO 27701 (PIMS), and ISO 27001 (ISMS), with certifications including TRUSTe Responsible AI (2024) and Global CBPR (2025); compliance obligations under these frameworks vary significantly by jurisdiction and entity. Material compliance considerations include the multi-entity data broker registration structure across subsidiaries, the scope of AI system use disclosed on linked sub-pages, and the adequacy of data subject rights mechanisms for individuals who may not know their data is held by D&B.