No public evidenceVerisign and GDPR
CertReports found no public GDPR evidence for Verisign as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 18 Aug 2018
- Expires or valid through
- 7 Jul 2027
- Scope
- Verisign collects personal data about EU, UK and Swiss employees and the employees of its affiliates to carry out and support the following functions and activities, including: (1) workflow management, such as assigning, managing and administering projects that may be performed across countries; (2) accounting, project and company costing, forecasts and estimates; (3) compensation analysis, decision-making and administration; (4) provision of benefits; (5) background check information (to the extent background checks are permitted under local laws); (6) stock plan and other employee equity program administration; (7) performance, career advancement and secondment management; (8) succession planning; (9) IT helpdesk and other support services; (10) data security services; and (11) purposes relating to operating its whistleblowing scheme, investigations, and remedial matters. Verisign also may obtain and process personal data about employees’ emergency contacts and other individuals (such as spouses, family members, dependents and beneficiaries) to the extent employees provide such information to Verisign. Verisign processes this information to comply with its legal obligations and for benefits administration and other internal administrative purposes. Verisign also obtains personal data about consumers located in the EU, UK and Switzerland in various ways. For example, Verisign collects personal data from consumers when they visit Verisign’s websites. The types of consumer personal data Verisign collects and the purposes for which it may use Verisign may use this information for the purposes are indicated in Verisign’s Privacy Statement located at https://www.verisign.com/en_US/privacy/index.xhtml. In addition, Verisign obtains personal data from representatives of current and prospective customers, such as contact information and payment or financial account data. Verisign uses this information to manage its relationships with current and prospective customers, process payments, and carry out Verisign’s obligations under its contracts with customers. Verisign may also receive consumer personal data in connection with providing services to its customers, including personal data that may be contained in WHOIS information, managed DNS requests, and encrypted data flows that transit Verisign systems in connection with the provision of online security services to its customers, such as during a DDoS attack. Verisign also obtains personal data of its vendors’ and service providers’ representatives. The information obtained may include contact information and payment or financial account data. Verisign shall use this information to manage its relationships with its vendors and service providers, process payments, and carry out Verisign’s obligations under its contracts with these parties. Verisign also may obtain and use personal data in other ways for which Verisign provides specific notice at the time of collection. Verisign shall share certain employee and consumer personal data with its affiliates and subsidiaries. Verisign may disclose employee and consumer personal data without offering an opportunity to opt out, and may be required to disclose the personal data: (i) to third-party processors Verisign has retained to perform services on its behalf and pursuant to its instructions, (ii) if it is required to do so by law or legal process, or (iii) in response to lawful requests from governmental authorities, including to meet national security, public interest or law enforcement requirements.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Verisign: Active: UK Extension Certification, EU-US Certification, SW-US Certification | Live pagesha256 7399a3c35f |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Verisign GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Networking category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Networking vendor has GDPR evidence in the index yet.