Data Privacy and Data Security​

VIAVI and Data Privacy

In a world where valuable data is increasingly proliferated and can so easily be misused, VIAVI places importance on protection of personal and customer data and takes its responsibility seriously to securely handle this data. VIAVI is committed to complying with all local legal requirements relating to the handling of data in all territories in which we operate. In addition, we strive to adhere to our contractual commitments and ensure protection of all data entrusted to us by our customers.

Data Security

Data security is the responsibility of our Information Security team, overseen by the Chief Information Security Officer who delivers quarterly reports to the Audit Committee of our Board of Directors.

We leverage a combination of NIST Cybersecurity Framework, International Organization for Standardization and Center for Internet Security practice standards to measure security posture, deliver risk management and work to provide effective security controls.

VIAVI Solutions Security Posture

VIAVI takes a comprehensive approach to securing both our corporate infrastructure and the products we deliver to customers. For details on our product security practices, vulnerability management program, and information security governance, see our VIAVI Security Posture document.

ISO:27001 Certification

Information systems and operational processes implemented in the provisioning, developing, monitoring, and maintaining delivery of VIAVI Solutions’ Network and Software Enablement (NSE) suite of products and services to global customers.  The activities and the technologies used to secure business, customer, and employee information accessed in the development, monitoring and delivery of VIAVI Solutions’ Network and Software Enablement (NSE) suite of products and services to global customers in accordance with the Statement of Applicability (no exclusions). 

VIAVI Solutions ISO:27001 Certificate

For the products and services governed by the ISO:27001 certified product development processes see table below.

How do you handle my data?

 These are the principles we adhere to when handling your data.

With a valid reason

When handling sensitive data, we will only do it when we have a legally valid reason, or with the owner’s consent.

Handle it Securely

We will transfer and store sensitive data securely.

Only do what we say

Our data handling practices align with our representations and commitments.

Do not sell

We do not sell personal data to any third party.

For only as long as agreed

We will only keep data for as long as needed to provide our services (or as required by law).

Limited access

We limit data access to those with a valid business need or responsibility to handle that data.

For more details about our data privacy practices and policies as well as if you resell our products view our General Terms and Conditions.

European Union Cyber Resilience Act (EU-CRA) Compliance

VIAVI is committed to EU CRA compliance and will continue to monitor tactical implementation as the centralized infrastructure evolves.

GDPR Statement

In May 2018, the EU General Data Protection Regulation (GDPR) replaced the existing 1995 EU Data Protection Directive (European Directive 95/46/EC). VIAVI currently complies with applicable data protection regulations and is committed to GDPR compliance across its relevant services. VIAVI has a dedicated internal team made up of cross-functional stakeholders which oversee VIAVI's GDPR compliance. For more information on VIAVI’s Privacy and Data Collection practices please see our Privacy Policy.

CCPA Statement

The California Consumer Privacy Act of 2018 (CCPA) was enacted to give consumers more control over the personal information businesses collect about them. For more information or to opt out click here.