The purpose of this document is to provide guidance to Customers of Thales OneWelcome Identity Platform from Thales around the data privacy and data protection requirements of GDPR. It also highlights the security controls and organizational measures that Thales has put in place to protect end users’ personal identifiable information (PII) collected, processed and stored as part of providing this service.