Do QuickBook hold PII data outside the EU? Privacy Shield is now redundant as per the EU DPB recommendations so how are accountant protected?

Hi, rmulroy1979.

At Intuit, we pride ourselves on our commitment to protecting your privacy. This Privacy Statement applies to our sites, products, and services. Inuit Ltd. is the controller of all Personal Information subject to this Statement for our Services available to global customers. We also provide Services targeted more specifically to distinct countries. If you are accessing a non-global version of our Services, the Intuit entity responsible for your Personal Information can be found here.

Yo u can browse these references for more information: 

• Privacy Statement
• QuickBooks GDPR Centre

You can always get back to this thread whenever you have questions.

Hi Admin,  Your privacy statement has not been updated since 2016. The E.U. – U.S. Privacy Shield Framework   has been deemed invalid by Shcrems II and there is no country specific policy for Ireland (an EU member) so I'm assuming that the World - wide applies to us in which case data is held mostly in the US which is contrary to the EU DPB recommendations which will most likely be adopted into law. From what you have provided I cannot see how we are covered using QB?

You have the right to know how we use your data, @rmulroy1979

Our privacy policy explains what we do with the information you provide us. It contains information on what we collect, who we share it with, and how we use it. I'm here to explain this further.

Intuit adheres to the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework (Privacy Shield) as established by the US Department of Commerce for the collection, use, and retention of personal information transferred from the European Union (EU), the United Kingdom (UK), and Switzerland to the United States in reliance on Privacy Shield. Concerning such information, Intuit has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. 

Furthermore, the original certification date for EU-U.S. PRIVACY SHIELD FRAMEWORK was last September 3, 2016, and the certification due date will be on March 3, 2023, which means that the privacy shield certification is still active. Feel free to visit this page for your reference: Privacy Shield Framework.

I'm also adding this article for more details with introduction and overview and its scope about the Intuit Global Statement:

• Intuit Global Privacy Statement
• EU-U.S. and Swiss-U.S. Privacy Shield Certification

Fill me in if you have more queries with your account, I'll be around to support you at all times. 

Hi Admin, You keep pushing the fact that you adhere to the "Privacy Shield" and that is the problem. That agreement is now invalid.

"Data exchange with the USA was allowed, because the USA is considered “adequate”, but not anymore… On the 16th of July 2020, the European Court of Justice declared the so-called ‘Privacy Shield’ agreement between Europe and the USA invalid. This ruling was made because the data of Europeans in the USA would not be sufficiently protected."

TO be clear - What I want to know what are you doing next to keep European data within the EU as per the EU DPB recommendations which came out almost two years ago?

I'm not interested in reading your existing privacy policy or the details on Priovacy shield- I have already consumed them and found them to be wanting in terms of the new requirements that need to be in place shortly, that is why I'm positng here. 

What are QB going to do to follow the new recommendations which will become law shortly?