Skip to main content
Deloitte logo

Deloitte

GDPR evidence

Shape the future faster with our innovation and technology

deloitte.comBusiness servicesLast verified 2 Nov 2026
Vendor website Are you Deloitte?
GDPR mark, CertReports state No public evidenceNo public evidence

Deloitte and GDPR

CertReports found no public GDPR evidence for Deloitte as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.

Are you the vendor? Add evidence

Evidence

ExpiredInactive
as of 2 Nov 2026 · confidence 100%
Kind
Listing
Issued or listed
21 Nov 2016
Scope
We process personal information regarding current, former, and prospective partners, principals and employees in connection with the personnel relationship, such as the administration of that relationship. We process personal information regarding clients and their personnel and customers in connection with the client relationship, such as the delivery of professional services and the administration of the client relationship. We process personal information regarding third parties (such as service providers and contractors) and their personnel in connection with the management and administration of the business relationships with the third parties. We disclose personal information to third party service providers in connection with the operation of our business, including our provision of services to clients and our administration of our Personnel and business relationships.
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
2 Nov 2026Deloitte LLP: Inactive
Live pagesha256 4a36bf66d8
Data Privacy Framework list
Official registry · HTTP 200
26 Oct 2026Deloitte LLP: Active: SW-US Certification, EU-US Certification, UK Extension Certification
Live pagesha256 72661d5c97
Data Privacy Framework list
Official registry · HTTP 200
12 Oct 2026Deloitte LLP: Active: SW-US Certification, EU-US Certification, UK Extension Certification
Live pagesha256 a940703509
This is wrong
ExpiredInactive
as of 2 Nov 2026 · confidence 100%
Kind
Listing
Issued or listed
31 Oct 2016
Scope
DTTS provides services to other legal entities within the Deloitte network of member firms. These entities include Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee ('DTTL'), its network of member firms, and their related entities. DTTL and each of its member firms are legally separate and independent entities. In the context of providing these services, DTTS may process personal information pertaining to employees, clients or other third parties associated with these Deloitte entities as a data processor. DTTS uses personal information regarding third parties (such as service providers and contractors) and their employees in connection with the management and administration of the business relationships with such third parties. DTTS may process personal information received from the EEA, the United Kingdom and Switzerland in the employment context. DTTS may disclose personal data to third party service providers in connection with the provision of the applicable service.
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
2 Nov 2026Deloitte Touche Tohmatsu Services, Inc: Inactive
Live pagesha256 6f3e609b22
This is wrong
What GDPR means, and what it does not

"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.

Read the GDPR guide and browse all vendors with evidence

Questions buyers ask

Is Deloitte GDPR compliant?

There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 18 Sep 2026First indexed by CertReports4 evidence rows across 3 frameworks entered the index.

Alternatives with GDPR evidence

Similar vendors (shared product tags or the Business services category) whose GDPR row is verified or vendor-stated, ranked by similarity.

No Business services vendor has GDPR evidence in the index yet.

Understand GDPR evidence

All articles