Data protection and information security
We ensure that in all business processes and products, data protection regulations are observed and all necessary information security measures are implemented. This means we comply with applicable laws and respect relevant contractual obligations.
Information security and the protection of personal data
We seek to protect relevant information and personal data in particular against unauthorized disclosure, access, manipulation, and loss through the application of risk-adequate, technical, and organizational measures. We apply these information security measures in the selection, use, and operation of IT solutions closely coordinated with the applicable cybersecurity standards.
Data protection and information security at all stages
When developing Bosch products and new business models, we ensure that data protection and information security regulations and requirements are considered early and implemented at each stage.
What is personal data?
Information referencing an identified or identifiable person, such as name, address, date of birth, bank details, phone number or customer ID, as well as IP address are personal data.

You accidentally sent associate records (which included associates’ names, home address, and date of birth) to the wrong party. However, you did reach out to the unintended recipient, and they agreed to delete all of this personal information. Is there anything more you should do?
Yes. If you disclose personal information without authorization to a third party by mistake, Bosch may have several legal obligations: notify people affected by such activity or authorities regardless of whether the unintended recipient agreed to delete the information.
Accordingly, you must immediately report this case into our data protection incident system (BKMS), inform your ISP-contact or inform us via email to dpo@bosch.com.