Data Protection and Cybersecurity
Consumers, customers and employees rely on Hershey to be responsible with their data. We earn their trust by respecting the privacy of everyone whose data we have access to, maintaining high data protection standards and handling their personal information with care. That includes endeavoring to avoid any negative impacts from data mismanagement.
Our processes comply with data privacy laws prescribing how to collect, store, use, share, transfer and dispose of personal information responsibly, wherever we operate. Our Privacy Center of Excellence (Privacy Center) prepares Hershey to comply with any new or expanded data privacy rules. The Privacy Center’s cross-functional team designs and implements appropriate physical, technical and administrative measures to prevent the unauthorized access, use, disclosure, alteration or destruction of personal data.
Engaging Employees in Security
Employees play a critical role in safeguarding data. We regularly educate and engage our people on this topic, including:
- Acceptable Use
- Responsible AI Use
- Data Classification
- The importance of cybersecurity for safeguarding our digital assets
A Robust Privacy Policy
Our Privacy Policy describes in detail:
- How we use personal information collected when consumers interact with us
- The types of information we collect
- How Hershey complies with all applicable privacy laws in the U.S. and where we do business
If there is a need to use personal information for purposes beyond the scope previously disclosed to consumers, we provide additional notice or seek consumer consent where required by applicable laws.