Business Conduct Policies
Policy statement
It is 3M policy to comply with all applicable privacy and data protection laws. This commitment reflects the value we place on earning and keeping the trust of our employees, customers, business partners and others who share their personal information with us.
What it means
3M will adhere to the following guidelines to the extent required by applicable laws:
- Limitations on the collection, use and disclosure of personal information.
- Notice – 3M will provide timely and appropriate notice to individuals about its data collection practices.
- Consent – 3M will collect, use, disclose and transfer personal information only with the individual’s consent, which may be express or implied, depending on the sensitivity of the personal information, the individual’s reasonable expectations and legal requirements.
- Purpose limitation – 3M will collect personal information only for specific, limited purposes. The information we collect will be relevant, adequate and not excessive for the purposes for which it is collected. 3M will not process personal information in a manner inconsistent with the purposes for which it was originally collected, unless the individual has subsequently consented to the new use of their personal information.
- Direct marketing - 3M will not use personal information for direct marketing purposes without giving the individual an opportunity to “opt-out.”
- Transfers to third parties and other countries - 3M will take appropriate measures, by contract or otherwise, to provide adequate protection for personal information that is disclosed to a third party or transferred to another country, including transfers within 3M.
- Management of personal information.
- Quality - 3M will take commercially reasonable steps to ensure that personal information is reliable for its intended use, accurate, complete, and, where necessary, kept up-to-date.
- Access - 3M will maintain procedures to give individuals reasonable access to their personal information and, when appropriate, the ability to correct or delete inaccurate or incomplete information.
- Security - 3M will take commercially reasonable measures to protect personal information from loss, misuse, unauthorized access or disclosure, alteration and destruction.
- Retention - 3M will not keep personal information for longer than necessary or permitted by law.
- Accountability and enforcement.
- Accountability - 3M will designate individuals within the company to be accountable for compliance with laws and related 3M policies.
- Enforcement - 3M will provide internal controls for verifying compliance with laws and related 3M policies and procedures.
- Complaint process - 3M will provide a fair process for investigating and resolving complaints and communicate the process to the individuals.
What to avoid
Do not engage in any of the following practices, unless you first consult with assigned 3M legal counsel to confirm your approach is permitted by applicable law:
- Collecting, using or disclosing personal information without the knowledge and consent of the individual.
- Disclosing personal information about 3M employees, customers and business partners to third parties.
- Transferring personal information from one country to another, even among 3M affiliates.
Rev. 06/05
