Privacy Ref Blog

Safe Harbor Found “Invalid”, Now What?

Transferring personal information from the EU to the US has been a challenge. Today it may have become more difficult with the EU Court of Justice finding that Safe Harbor is invalid. For those 4,000 or so businesses that use Safe Harbor for data transfers the question  is how to go ahead.

This is actually a question not only for businesses, but for DPAs as well. The ruling had more to do with the practices of US surveillance as disclosed by Snowden than the construct of the Safe Harbor program itself. This places not only transfers via Safe Harbor in questions, but may have an equally impactful impact of transfers based on contracts, binding corporate rules, and consent. In each case, surveillance is equally possible so the DPAs, along with the Article 29 Working Party, will need to offer some guidance. .

What to do next is murky at best. In the coming weeks the DPAs should begin to give some direction. As I believe in contingency planning, it is not a bad time to begun to understand model contracts and BCRs just to get the lay of the land. Then, when the DPAs weigh in, you will have a foundation to make proper decisions.

  • author's avatar

    By: Bob Siegel

    Bob Siegel, the founder and President of Privacy Ref, Inc., has extensive professional experience in the development and improvement of privacy policies and procedures, the definition of performance metrics to evaluate privacy maturity, and the evaluation of compliance. He utilizes a combination of alignment, adaptability, and accountability strategies to guide organizations in achieving their privacy goals.

    He is a Fellow of Information Privacy (FIP) and a Certified Information Privacy Professional, awarded from the International Association of Privacy Professionals, with concentrations in U.S. private-sector law (CIPP/US), US public sector law (CIPP/G), European law (CIPP/E), and Canadian law (CIPP/C). He is also a Certified Information Privacy Manager (CIPM) and Privacy Technologist (CIPT).

    Siegel is a member of the IAPP faculty, has served on the Certification Advisory Board for the CIPM program the Publications Advisory Board.

    Siegel also writes the blog “Operational Privacy” on CSOonline.com

  • author's avatar

  • author's avatar

    Preparing your customer-facing staff
    Automation for Privacy
    Don’t Forget Basic Communication
    Top 6 Things For GDPR Procrastinators To Do
    Using GDPR as a framework for your privacy program (even if you are not in scope)

    See all this author’s posts

Privacy Ref provides consulting and assessment services to build and improve organizational privacy programs. For more information call Privacy Ref at (888) 470-1528 or email us at info@privacyref.com

Posted on October 6, 2015 by Bob Siegel
Tags:

« »

No Responses

Comments are closed.


« »

Subscribe to our mailing list

Please fill out the form below.

Required

Want to find out more?

Simply go to the contact page, fill out the form, and someone from Privacy Ref will be in touch with you. You can also send an email to info@privacyref.com or call (888) 470-1528.

News

April 16, 2018

IAPP Training Classes
Privacy Ref is proud to announce that we are an official training partner of the IAPP. You now have the opportunity to learn from one of our knowledgeable privacy professionals using the most respected training content in the industry. The robust interactive training offered, aids in the understanding of critical privacy concepts. The contents of the courses are integral to obtaining your privacy certifications and to educate your new team. Learn more here.

Latest Blog Posts

September 21, 2018

Is Your Biometric Clock Ticking?
I recently read an article published on the Society for Human Resource Management’s website on the prevalence of biometrics in the employment context. Specifically, the author referenced a Spiceworks’ survey of IT professionals from February 2018 that provided, in my mind, surprising results. Continue reading this post...

Other Recent Posts

PRIVACY REF