Skip to main content

DATA, TECHNOLOGY AND PRIVACY

Your data and how we protect it

Mom touching heads with daughter in kitchen.

SPOTLIGHT

Today and tomorrow’s innovations

People, data and technology drive innovation

Innovation thrives when the right technology, informed by data and trusted tools, is used to solve real problems. 

Businesswoman working on laptop by a window in coffee shop.

OUR COMMITMENT

Mastercard’s data and technology principles

We hold ourselves to the highest standard of data and technology responsibility.

Our seven foundational principles

Mastercard has developed a set of robust principles that serve as our guide, as we share our experiences and best practices with partners, regulators and policymakers to inform a broader common framework for responsible data-driven innovation.

Our four foundational promises

We understand that personal information is just that — personal. People have the right to choose how, when and where their personal information is used and shared. When it comes to your data, we promise that:

Our privacy policies 
and practices

Your privacy

Check out our Global Privacy Notice to learn more about how we handle your personal information.

Your choices

Control how your personal information is used for marketing, data analytics and web analytics at any time and at no cost, using our simple online opt-out forms.

Your data

Use our single portal to understand and manage your personal information that Mastercard holds.

The only AI is responsible AI

It’s no secret that artificial intelligence has the potential to transform ... everything. But AI is powered by data, making information a unique currency deserving of strong safeguards and constant vigilance. Discover our latest discussions on AI.

Mobile application design concept shown as computer code.

You should benefit from it

We believe that an individual's personal information should be used to make their life easier and richer.

 

We are committed to responsible data-driven innovation both within our organization and as a significant player in the European data ecosystem. For instance, Mastercard has developed a suite of Open Banking Solutions to add value to our business partners and allow people to benefit from innovative payment services, while keeping individuals at the center of all we do. We regularly work with EU policymakers and industry bodies to enact strong privacy protections for individuals, while still enabling businesses to operate globally and use data for responsible innovation.

We protect it

Accountability

We believe an individual’s data must be kept secure and used responsibly. We employ rigorous standards to ensure the protection, safety and security of data within Mastercard and with all our partners and vendors. Mastercard complies with all regional and local regulations, including the General Data Protection Regulation (GDPR) in the European Union. In particular, we've embraced the GDPR as an opportunity to enhance our global data practices by extending the GDPR’s high consumer protection standards to all users.

In Europe, our Binding Corporate Rules (“BCRs”) – i.e. a privacy code of conduct – have been approved by EEA Data Protection Authorities and allow us to safely and securely transfer personal information from our cardholders, customers, partners and employees to all Mastercard entities globally.

Partnerships

Mastercard actively participates in privacy and data protection thought-leadership groups and regulatory expert groups in Europe, including the OECD Expert Group on Privacy and Network of Experts on AI, the World Economic Forum Taskforce on Data Intermediaries, the EU Agency for Cybersecurity (ENISA) AI Expert Group and the European Commission B2G data sharing Expert Group.

We also belong to the Centre for Information Policy Leadership (CIPL), the Future of Privacy Forum, VUB’s Brussels Privacy Hub. In September 2021, we also became a member of Gaia-X, a project bringing together representatives from business, politics, and science from Europe and around the globe to create together a federated and secure data infrastructure.