No public evidenceForcepoint and GDPR
CertReports found no public GDPR evidence for Forcepoint as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
ExpiredInactive
as of 17 Sep 2026 · confidence 100%- Kind
- listing
- Issued or listed
- 6 Dec 2016
- Scope
- HR Data--Forcepoint collects data regarding past, potential, present and future staff, including job candidates, volunteers, agents, independent contractors, interns, temporary and casual workers) ("Employees") and their relatives, parents, beneficiaries and guardians as needed to manage the Company's legitimate interests in appropriately executing it business activities/responsibilities. While executing our legitimate interests we are careful to take account of and appropriately address the interests, rights and freedoms of effected individuals. The type of data collected includes, but is not limited to personal information such as national identifiers, academic and professional qualifications, salary and banking data, employment details, IT related data, healthcare information, and information regarding Employees' relatives. Examples of our legitimate interests include Processing related to: - Employment Records: Employment records, payroll, compensation and equity-related awards, recruitment, administrative and managerial tasks, time-tracking, healthcare and other benefit administration, employee traveling, expense tracking and reimbursement, appointments or removals, disciplinary matters, ensuring compliance with Forcepoint policies, working time management, determining and reviewing salaries, employee career development (including employee evaluations), talent management. - Legal/Compliance: Compliance with applicable legal and other requirements, management reporting and analysis. - Communications and Training: Enabling internal contacts and communication, providing training and learning services, providing IT support to Employees, management and maintenance of the functioning and security of the IT systems and network. - Cybersecurity: Management and maintenance of the security of Forcepoint information systems as well as Forcepoint and Employee confidential information, including Forcepoint Employee Data and Forcepoint intellectual Property. Non-HR Data--Forcepoint collects non-HR data as outlined in our Privacy Policy from individuals that (i) register on the Forcepoint website http://www.forcepoint.com/ (and any of its sub-domains) (the 'Website') or (ii) do business with Forcepoint (Forcepoint Business Data). We also may receive personally identifiable data of individuals that use certain Forcepoint products ('End User Personal Data') deployed by Forcepoint's customers to monitor their networks as necessary to protect against cyber threats. The types of End User Personal Information we may receive from the use of such monitored networks includes Subscriber ID information, such as email addresses; Communication information, such as email addresses and email subjects; and Traffic data, such as browsing logs and website session data. Third Party Service Providers--Forcepoint uses a limited number of third-party service providers to assist us with administering employment related and customer servicing tasks. Examples of our use of third parties with respect to employment related tasks includes such things as employment application administration, payroll management, provision of health insurance and processing of health insurance claims. Examples of our use of third parties in customer account servicing tasks includes provision of product support, assistance with the transmission of data, and provision of data storage services in the form of data center co-location. Forcepoint's policy with respect to all third parties retained to assist with tasks that may involve access to personally identifiable information is to maintain contracts with the third parties that limit access and use of personally identifiable information consistent with the scope and purpose of the contract. Our policy is also to ensure disclosure of personal data in the execution of such contracts is in compliance with Forcepoint's Privacy Shield obligations.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Forcepoint LLC: Inactive | Live pagesha256 0734d6801f |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Forcepoint GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Security category) whose GDPR row is verified or vendor-stated, ranked by similarity.
