International Safe Harbor Privacy Principles: Difference between revisions

Revision as of 17:29, 27 October 2017

Revision as of 21:38, 30 October 2017

Line 28:

== Scope, certification and enforcement==

Only U.S. organizations regulated by the [[Federal Trade Commission]] or the [[United States Department of Transportation|Department of Transportation]] may participate in this voluntary program. This excludes many financial institutions, (such as banks, investment houses, credit unions, and [[savings & Loans Credit Union|savings & loans institutions]]), telecommunication [[common carriers]], including [[internet service provider]]s, labor associations, non-profit organizations, [[agricultural co-operatives]], and [[meat processor]]s, journalists and most insurances.<ref>U.S. Department of Commerce [http://www.export.gov/safeharbor/ Welcome to the U.S.-EU & U.S.-Swiss Safe Harbor Frameworks] 9 October 2015, retrieved 30 October 2015</ref> although it may include investment banks. <ref>U.S. Department of Commerce [http://www.export.gov/safeharbor/eu/eg_main_018377.asp FAQ - Investment banking and audits] 29 January 2009, retrieved 30 October 2015</ref>

After opting in, an organization must have appropriate employee training and an effective dispute mechanism in place, and self re-certify every 12 months in writing that it agrees to adhere to the U.S.-EU Safe Harbor Framework's principles, including notice, choice, access, and enforcement.<ref name=overview>U.S. Department of Commerce [http://www.export.gov/safeharbor/eu/eg_main_018476.asp U.S.-EU Safe Harbor Overview], 18 December 2013, retrieved 30 October 2015</ref> It can either perform a self-assessment to verify that it complies with the principles, or hire a third-party to perform the assessment. Companies pay an annual $100 fee for registration except for first time registration ($200).<ref>U.S. Department of Commerce [http://www.export.gov/safeharbor/eg_main_020436.asp Safe Harbor Fees] 9 April 2015, retrieved 30 October 2015</ref>