DPF Services
Dispute Resolution Process
Welcome to the BBB National Programs consumer complaint system. BBB National Programs, a non-profit organization based in the United States, helps individual consumers resolve privacy complaints under the Data Privacy Framework (DPF) Program.
If you are an individual in the European Union, the United Kingdom, Switzerland, or other participating countries with a privacy complaint against a participating U.S. business, you may submit the complaint to our program. Our process is free of charge for individual consumers.
Free
Our no-cost online process provides prompt, thorough handling of privacy inquiries and complaints.Independent
Our long-established independent non-profit organization ensures consumer complaints are heard and addressed.Accessible
We help you understand your redress options to ensure business accountability.Transparent
Procedures are detailed in our Rules and casework is published in our annual Procedure Reports.How to File A Complaint
Step 1: Contact the business at the address listed in its privacy policy.
Step 2: Await a reply. The business must respond within 45 days.
Step 3: File your complaint with BBB National Programs.
Step 4: Engage in our dispute resolution process as we work to resolve your complaint with the business.
Step 5: If issues remain, you may have additional redress options.
BBB National Programs will review all eligible complaints and help you and the participating business reach a resolution as described in our program’s Rules. A Participating Business must comply with BBB National Programs' final determination of any dispute. However, our process is non-binding on the consumer, which means that using our dispute resolution process will not affect your legal rights as an individual.
Is your complaint eligible for resolution?
Your complaint must concern personal data about you that was collected in a covered country and received in the United States by a Participating Business.
1. Eligible individual.
Your complaint concerns personal data about you (or your child under 13 years old).
2. Covered country.
Your personal data was collected in one of the following countries:
|
European Union |
Austria Belgium Bulgaria Croatia Cyprus Republic Denmark Estonia |
Finland France Germany Greece Hungary Ireland Italy Latvia |
Lithuania Luxembourg Malta Netherlands Poland Portugal Romania Slovakia |
Slovenia Spain Sweden
|
|
European Economic Area |
Iceland Liechtenstein Norway |
|||
|
The United Kingdom |
||||
|
Switzerland |
3. Participating business.
Your personal data was received in the United States by a U.S. organization that is both:
a. Self-certified under the Data Privacy Framework Program, and
b. A Participating Business with BBB National Programs (you may search our list of current participants when you file your complaint).
4. Complaint or inquiry.
Your complaint must allege a violation of the Data Privacy Framework Principles by the Participating Business or assert your rights under the Principles in relation to your personal data.
Please reach out to the U.S. business via the contact information listed on its privacy policy before filing your complaint with BBB National Programs. The business has 45 days to respond to your inquiry.
Frequently Asked Questions
Principles & Procedures
When a U.S. business joins the Data Privacy Framework Program, it makes a public commitment that its processing of European Union, United Kingdom, and Switzerland, or other participating countries', personal data will meet the data protection standards embodied in the Principles.
A business that chooses BBB National Programs as its IRM agrees to follow our Procedure Rules when responding to privacy complaints, and to keep the same promise to the individuals who make use of our dispute resolution service.
Resources for Consumers