Privacy Shield Alternatives

Does your business transfer personal data from the EU to the US?

The E.U.-U.S. and Swiss-U.S. Privacy Shield Frameworks were designed by the U.S. Department of Commerce and the European Commission and Swiss Administration to provide companies on both sides of the Atlantic with a mechanism to comply with data protection requirements when transferring personal data from the European Union and Switzerland to the United States in support of transatlantic commerce.

The third annual review of the E.U.-U.S. Privacy Shield data transfer mechanism has been nodded through by Europe’s executive on October 25, 2019.

Privacy Shield Certification

The Privacy Shield self certification is still a legitimate possibility to cover the transfer of data between E.U., Swiss companies on one side and U.S. companies on the other without individually getting European Data Protection Authorities involved. Other ways are Binding Corporate Rules and bilateral agreements on Standard Contractual Clauses.

Why 2B Advice?

2B Advice can assist your company with the formal self-certification process and also help to ensure the following principles of certification:

1. Notice
2. Choice
3. Accountability for Onward Transfer
4. Security
5. Data integrity and purpose limitation
6. Access
7. Recourse, enforcement and liability

Ensuring compliance

This is so important because self-certification is a validation that the principles are adhered to by the companies. The risk is that the FTC will find that the guarantees given are not being complied with, which can lead to severe penalties.