Last updated: 5 October 2026
Accountability
The data controller is the Global Converged Security Board (GCSB), based in the United Kingdom. Full registered entity details, registered address and any ICO registration number will be published on the About page. Privacy contact: use the Contact page and select "Other", with the subject "Privacy request".
The person responsible for GCSB's compliance with PIPEDA can be reached through the Contact page.
How we apply the fair information principles
- Identifying purposes: the purposes are listed in the Privacy Policy and stated when data is collected.
- Consent: you consent when you take a GCSB credential, create an account, or opt into the Member Directory. You may withdraw consent, subject to legal or contractual limits; withdrawing may mean we cannot keep providing a service.
- Limiting collection: we collect only what is needed for credentialing, verification and the member portal.
- Limiting use, disclosure and retention: data is used only for the stated purposes and kept only as long as needed.
- Accuracy: members can update their profile at any time; register corrections can be requested.
- Safeguards: role-based access, private storage for CVs and hashed passwords.
- Openness: our policies are published in this Legal section.
- Individual access: you may request access to and correction of your personal information.
- Challenging compliance: you may raise a concern with us at any time.
Cross-border processing
Your personal information may be stored and processed outside Canada, including in the UK, the EU and the United States, and may be accessible to authorities in those countries under their laws.
Requests and complaints
We respond to access requests within 30 days. How to make a request. If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).