The Privacy Shield framework is a voluntary program that provides companies with a mechanism for complying with EU data protection requirements when transferring personal data from the EU to the US. The framework is open to businesses subject to the enforcement jurisdiction of the US Federal Trade Commission or the US Department of Transportation. It replaces the Safe Harbor program and has a number of substantive new requirements that should be considered before a company self-certifies under the framework.
Newsletter: Department of Commerce Now Accepting Privacy Shield Self-Certifications: A Primer for Compliance and Self-Certification