Mercedes-Benz strengthens data privacy in ESG framework under GRI standards

Mercedes-Benz Group elevated data privacy as a core ESG tenet, aligning with GRI 3-3 and GRI 418-1 standards through a Group-wide Data Governance System. The move positions data privacy as a material governance topic that Indian companies adopting BRSR and GRI reporting should note within their ESG frameworks.

The Mercedes-Benz Group elevated data privacy as a core ESG tenet, aligning with GRI 3-3 and GRI 418-1 standards as it adopts AI and deep learning technologies. The company established a comprehensive data responsibility framework spanning legal, cultural and organizational considerations, operationalized through a Group-wide Data Governance System covering data governance structure, data modeling, data culture and a data compliance management system. A Digital Governance Board, comprising Board of Management members, supervises digital governance efforts to ensure alignment with strategic goals.

The initiative affects automotive companies and data-intensive corporations managing privacy as a governance material topic. Mercedes-Benz designated a Chief Officer Corporate Data Protection and team to monitor compliance with data protection laws and internal policies. Its data vision emphasizes transparency, choice and security, with the Mercedes me Privacy Center, introduced in 2021, giving customers control over personal data. The company outlined four AI principles, Responsible Use, Explainability, Protection of Privacy, and Safety and Reliability, enshrined in its Integrity Code, alongside a Cyber Intelligence and Response Center and cyber insurance.

Indian companies adopting BRSR and GRI-aligned reporting should note data privacy's treatment as a material governance topic under GRI 3-3 and GRI 418-1, particularly as AI and deep learning deployment grows. Stakeholders should monitor how corporations structure data governance boards, designate data protection officers and operationalize AI ethics principles. Firms seeking to mitigate reputational and legal non-compliance risk amid evolving data protection regulations may reference Mercedes-Benz's comprehensive framework, customer-facing privacy controls and cyber risk management practices.

Key figure — GRI standards referenced: GRI 3-3 and GRI 418-1