Privacy Shield replaces Safe Harbor

If you’re storing or sending personal data to the US from the EU there’s a new agreement which replaces Safe Harbor.  The EU-US Privacy Shield came into effect on 1st August 2016.

If you relied on Safe Harbor to provide adequate data protection for transfers to the US then you need to review your arrangements with those organisations.  They’ll need to sign up to  the EU-US Privacy Shield, or you can use Standard Contractual Clauses, or Binding Corporate Rules.  More information about these can be found here.

This change has come about since the Court of Justice of the European Union ruled that the Safe Harbor agreement didn’t provide adequate protection.  So if your organisation is still using Safe Harbor as the legal basis for transfers to the US you need to review your position and implement alternative arrangements.