IMF Privacy Notice
Source details
- Canonical URL
- IMF Privacy Notice
Other formats
Overview
- The IMF Privacy Notice outlines how the IMF processes and safeguards Personal Data in accordance with stated principles and related IMF internal rules and practices.
- For the purposes of the Notice, “Personal Data” means information relating to an identified or identifiable individual.
- The IMF may update the Privacy Notice periodically; any changes will be posted by the IMF.
Types of Personal Data Collected
- Contact Information (e.g., name, email, address, phone number)
- Online Information (e.g., cookies, IP address when visiting IMF websites, information from publicly accessible online sources relevant to IMF activities)
- Contractual Information (e.g., details related to services provided to the IMF)
- Other relevant information necessary for the IMF’s activities
Lawful Bases, Principles, and Processing Constraints
- Lawful bases for processing Personal Data:
- When individuals provide consent for processing of their Personal Data.
- When processing is necessary to perform a contract with the IMF or to take pre-contractual steps.
- When processing is necessary to comply with IMF policies, procedures, rules or with other legal obligations of the IMF.
- When processing is necessary to protect an individual’s vital interests.
- When processing is necessary for the IMF to carry out its mandate.
- Core data protection principles the IMF follows:
- Legitimacy, Fairness, and Transparency
- Purpose Limitation and Data Minimization: collection limited to what is necessary; further processing for archiving, research or statistical purposes is not considered incompatible with the original purpose.
- Accuracy: Personal Data recorded as accurately as possible and updated as necessary.
- Storage Limitation: retained no longer than necessary and longer only if consistent with applicable retention rules.
- Confidentiality, Integrity, and Availability: protected by appropriate technical or organizational safeguards against unauthorized processing and accidental loss, destruction or damage.
Retention, Access, and Security
- Retention:
- Personal Data is retained only for as long as necessary to fulfil the intended purpose(s) or as required by internal policy requirements.
- The IMF determines appropriate periods for retaining Personal Data depending on the purpose of processing and in accordance with its wider retention rules.
- Access and sharing:
- Access to Personal Data is limited to authorized IMF personnel and selected third parties (e.g. duly authorized partners or service providers) who are bound by data privacy standards.
- Security safeguards:
- Personal Data is protected by appropriate technical and organizational safeguards against accidental loss, destruction, damage, alteration, disclosure, access, or use.
Individuals’ Rights and Limitations
- Rights available to individuals, subject to IMF internal rules and limitations:
- Right to Information: right to obtain information about the processing of your Personal Data by the IMF through the Privacy Notice and any additional notices that may apply to the specific processing.
- Right to Access: right to obtain confirmation of whether your Personal Data is being processed, access your Personal Data, and obtain further details about its processing.
- Right to Rectification: right to request correction of Personal Data that is inaccurate or incomplete.
- Right to Objection: right to object to processing at any time if the processing is based on necessity for the IMF to fulfill its mandate and you have specific grounds related to your particular situation.
- Limitations on rights (IMF discretion) apply where Personal Data is processed for or in connection with:
- any informal or formal processes related to IMF’s dispute resolution system;
- inquiries, confidential advice and guidance or investigations by the IMF’s ethics offices or committees;
- investigations in relation to cyber security incidents by IMF’s Chief Information Security Officer;
- any disciplinary process;
- the provision of confidential feedback on work performance or performance in selection processes;
- prevention and detection of criminal activities;
- participation by the IMF in legal proceedings;
- research or statistical purposes to the extent that the exercise of rights would prevent or seriously impair the achievement of these purposes.
- Additional limitation note:
- The scope of the right to information and right to rectification will depend on the IMF’s balancing of various considerations including costs and resources.
How to Exercise Rights, Submit Complaints, and Appeals
- To exercise rights to access, rectification, or objection:
- Complete the designated form in English and send it to the IMF Data Privacy Office via email at IMFDataPrivacy@IMF.org or submit it by mail or hand delivery to:
- International Monetary Fund
- Attention: Data Privacy Office
- 700 19th Street, N.W.
- Washington, DC 20431
- United States of America
- Complaints:
- Complaints to the IMF Data Privacy Office must be submitted within 120 calendar days of either:
- The date you were notified of the Data Privacy Office’s decision regarding your request for access, rectification or objection, or
- The date you became aware of the alleged violation, whichever is earlier.
- To submit a complaint, complete the designated form in English and send it via email at IMFDataPrivacy@IMF.org or submit it by mail or hand delivery to the Data Privacy Office address above.
- The Data Privacy Office does not accept or respond to access requests, rectification requests, objections or complaints submitted by individuals whose identity cannot be verified or that are incomplete, overly broad or unclear, repetitive, frivolous, excessive or clearly unfounded; and does not award any compensation, costs, fees or other monetary remedies in relation to complaints submitted to it.
- Appeals:
- If not satisfied with the Data Privacy Office decision, you have the right to submit an appeal to the IMF Data Privacy Appeals Committee within 30 calendar days of being notified of that decision.
- To submit an appeal, complete the designated form in English and send it via email at IMFDataPrivacyAppeal@imf.org or submit it by mail or hand delivery to:
- Attention: Data Privacy Appeals Committee
- The Data Privacy Appeals Committee does not accept or respond to appeals submitted by individuals whose identity cannot be verified or that are incomplete, overly broad or unclear, repetitive, frivolous, excessive or clearly unfounded; and does not award any compensation, costs, fees or other monetary remedies in relation to appeals submitted to it.
Contact and Further Information
- Contact for questions regarding the Privacy Notice:
- IMF Data Privacy Office: IMFDataPrivacy@IMF.org
- The IMF may update the Privacy Notice periodically and will post any changes.
Content in this bundle
- Data Privacy Appeal Form
- Personal Data Privacy Complaint Form
- Rights Request Form
References