{"id":40041,"date":"2026-10-04T20:25:07","date_gmt":"2026-10-04T20:25:07","guid":{"rendered":"https:\/\/2027.ipbpartners.eu\/disc-gdpr-data-protection\/"},"modified":"2026-10-15T12:00:46","modified_gmt":"2026-10-15T12:00:46","slug":"disc-gdpr-data-protection","status":"publish","type":"page","link":"https:\/\/ipbpartners.eu\/en\/disc-gdpr-data-protection\/","title":{"rendered":"DiSC, GDPR and data protection"},"content":{"rendered":"\n
\n
\n
\n
\n

DiSC, GDPR and data protection<\/h1>\n\n\n

Before HR or procurement approves an assessment, they need to know where the data goes, who can see the reports and what the agreements say. Here is how it works with Everything DiSC\u00ae and IPB Partners.<\/p>\n\n\n

\n
Ask for our Data Processing Agreement<\/a><\/div>\n\n\n
See who does what<\/a><\/div>\n\n<\/div>\n\n<\/div>\n\n\n
\n
<\/span><\/span>

Before anyone takes the assessment<\/p>

Data Processing Agreement<\/p>

Signed with every client<\/span><\/div><\/div>

Who sees the report<\/p>

Participant<\/span>You decide: manager or HR<\/span>Not shared without agreement<\/span><\/div><\/div>

Wiley<\/p>

EU-U.S. Data Privacy Framework<\/strong>, plus the UK and Swiss extensions<\/p><\/div><\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n

\n
\n
\n

Who does what with the data<\/h2>\n\n\n

Under GDPR, every party has a defined role. Assessments run on Wiley’s platform, and the agreements between the three parties set out what each may do.<\/p>\n\n<\/div>\n\n\n

Your organisation<\/p>

Data controller<\/h3>

Decides who takes the assessment and who sees the reports.<\/p><\/div>

Data Processing Agreement<\/span><\/div>

IPB Partners<\/p>

Data processor<\/h3>

Sets up assessments and supports you, under the agreement we sign.<\/p><\/div>

Data Privacy Framework<\/span><\/div>

Wiley platform<\/p>

Sub-processor<\/h3>

Hosts the assessment and reports, and takes part in the EU-U.S. Data Privacy Framework.<\/p><\/div><\/div>\n\n<\/div>\n\n<\/section>\n\n\n

\n
\n
\n
\n

A checklist for HR and procurement<\/h2>\n\n\n

Use this when you review DiSC with your data protection officer or works council. We can send the supporting documents.<\/p>\n\n\n