SAP Receives Global Certification For Data Protection And Privacy From BSI.....

SAP today announced that the British Standards Institution (BSI) has certified the processes of SAP regarding data protection and privacy. SAP is one of the first companies to receive global certification from BSI for BS 10012:20171 – which outlines the core requirements companies need to consider when collecting, storing, processing, retaining or disposing of personal records related to individuals.

The General Data Protection Regulation (GDPR) is the first major overhaul of EU-data protection regulations in 20 years. It harmonizes multiple EU regulations into a single, centralized standard. These stronger, more uniform rules on data protection mean individuals have more control over their personal data.

This certification confirms that the certified internal processes of SAP meet the requirements of BS 10012:2017, which are in accordance to GDPR. In addition, the certification shows:

• SAP customers will benefit from standardized auditing processes that are more reliable and can help them reduce costs.
• SAP has a reliable basis for evaluating internal compliance.
• SAP uses an internationally renowned standard.
• SAP becomes the first user of a certified data protection management system.

Luka Mucic, Member of the Executive Board of SAP SE and Chief Financial Officer, said: “At SAP, data protection and privacy is a top priority. For us it is not a new trend – it is part of our DNA. Certification by British Standards Institution (BSI) is testimony that our certified internal processes are ready for the upcoming GDPR requirements. Our teams are very proud, as this is one of the highest data protection standards available.”

The independent, third-party certification from BSI, the business standards company that equips businesses with the necessary solutions to turn standards of best practice into habits of excellence, is formal recognition that SAP adheres to leading international standards when it comes to data protection and privacy. SAP is committed to ensuring compliance with GDPR as a company by May 25, 2018. SAP is also supplying technologies and products that help our customers prepare for the requirements of GDPR.

BSI Chief Executive Officer Howard Kerr said: “Data protection is a leading concern for organizations of all sizes and sectors, many of whom manage large quantities of sensitive data on their employees, customers and other stakeholders. By achieving this certification, SAP has demonstrated that they're taking a best-practice approach when acquiring, storing, processing and sharing personal data and are committed to building information resilience.”

About SAP….

As market leader in enterprise application software, SAP (NYSE: SAP) helps companies of all sizes and industries run better. From back office to boardroom, warehouse to storefront, desktop to mobile device – SAP empowers people and organizations to work together more efficiently and use business insight more effectively to stay ahead of the competition. SAP applications and services enable more than 388,000 business and public sector customers to operate profitably, adapt continuously, and grow sustainably.

Any statements contained in this document that are not historical facts are forward-looking statements as defined in the U.S. Private Securities Litigation Reform Act of 1995. Words such as “anticipate,” “believe,” “estimate,” “expect,” “forecast,” “intend,” “may,” “plan,” “project,” “predict,” “should” and “will” and similar expressions as they relate to SAP are intended to identify such forward-looking statements. SAP undertakes no obligation to publicly update or revise any forward-looking statements. All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ materially from expectations. The factors that could affect SAP's future financial results are discussed more fully in SAP's filings with the U.S. Securities and Exchange Commission (“SEC”), including SAP's most recent Annual Report on Form 20-F filed with the SEC. Readers are cautioned not to place undue reliance on these forward-looking statements, which speak only as of their dates.