The World Bank (WB) and its Integrity Vice Presidency (INT) take concerns about data privacy seriously and are committed to protecting the confidentiality, integrity, and security of all personal data entrusted to it, by complying with the procedures set forth by the World Bank Personal Data Privacy Policy.
INT investigates allegations of fraud, corruption, collusion, coercion, and obstruction in WB operational contracts, and by WB staff and vendors. INT’s investigations can result in the sanction of suppliers and vendors and in personnel action for staff.
This Privacy Notice informs you about the processing of personal data that we collect via INT’s online Integrity Complaint Form for the purposes of investigating allegations of sanctionable practices involving WB financed projects, vendors, or staff. “Personal data” means any information relating to an identified or identifiable individual.
By providing personal data to INT, data subjects expressly consent for their personal data to be processed in accordance with the measures of protection described in this Privacy Notice. Data subjects should be informed that the same protections apply, even when data is provided to INT by sources other than the data subjects themselves.
What types of personal information does INT collect?
INT collects and processes information on the issues reported via the online Integrity Complaint Form and during investigations. These personal data may include the name(s), contact details, and other identifying information of complainants and other relevant individuals, if provided.
Personal data submitted to and collected by INT is handled confidentially. The information submitted through the online complaint form, as well as information collected through INT’s investigations, is stored in a secure database and is accessible only to INT for investigative purposes. The Bank maintains appropriate technical and organizational safeguards against unauthorized processing of personal data and against accidental loss, destruction, or damage. INT takes steps to protect personal data against misuse, interference, and loss, and from unauthorized access, modification, or disclosure. We do not sell or otherwise disclose personal data of the person(s) submitting their personal data along with a complaint.
How will the information be used?
Your personal data will only be used and disclosed for the purpose for which it was collected, or otherwise in accordance with the WB Data Privacy Policy. INT will not disclose information provided by complainants that may reveal their identity outside of responsible World Bank units without their consent.
INT may forward relevant, non-identifying information to other WB units or appropriate third parties if the issue raised is outside INT’s jurisdiction. For example, if the project identified is financed by a different development agency, or if the issue is not related to fraud, corruption, collusion, or coercion but may still be a matter of interest to another WB unit. The transferring of personal data is done with appropriate regard for the protection of personal data and in accordance with established principles.
Names of individuals who are subject to sanction as a result of INT’s procurement or vendor investigations will be publicly identified on the relevant websites:
INT also publishes redacted investigation reports that protect the identities of complainants.
How long will information be kept?
Your personal data will be kept only as long as necessary for the purposes set out in this Privacy Notice and generally no longer than 30 years in accordance with applicable records retention and disposition schedules.
If you have questions on this policy, please contact: privacy@worldbank.org.