TRUSTe 2 in 1 Privacy Shield / Model Contract Clause EU Data Transfer Compliance
European Commission released new Principles and confirms EU-U.S. Privacy Shield will replace Safe Harbor cross border data transfer mechanism upon EU ratification. Some companies may still want to deploy multiple mechanisms.
The European Commission released its draft Decision on the adequacy of the new EU–U.S. Privacy Shield program, accompanied by the new Principles along with information on how the Program will work. The new arrangement will require that companies meet stronger obligations to protect the personal data of Europeans and introduces stronger monitoring and enforcement by the US Department of Commerce (DOC) and the Federal Trade Commission (FTC). Now more than ever, companies need guidance to ensure requirements under the new framework are met.
While procedures for EU ratification of the EU-U.S. Privacy Shield continue, some companies may still want to also deploy other mechanisms such as Model Contract Clauses for greater privacy risk assurance.
In a recent TRUSTe EU Data Transfer Privacy Benchmark Report, research showed an increase in the percentage of companies deploying both Safe Harbor / Privacy Shield and Model Contract Clauses from 20% to 53% due to uncertainty around the new framework. The increase was even more pronounced for large companies (>$1B revenue) from 43% to 100%.
With the release of the new EU-US Privacy Shield arrangement, 49% said they’d keep both Model Contract Clauses and Safe Harbor / Privacy Shield, while another 32% said they’re “not sure”. Companies may feel the need to deploy both approaches for greater risk assurance over a longer period of time.
EU Data Transfer Privacy Assessment
No matter what approach you choose, TRUSTe can help. Our EU Data Transfer Privacy Assessment is the most agile privacy compliance solution on the market. This 2-in-1 annual subscription includes:
| DUAL COVERAGE | |||
|---|---|---|---|
| EU-US Privacy Shield Assessment | Model Contract Clause Assessment | EU Data Transfer Assessment Package | |
| Assessment against EU-US Privacy Shield requirements | |||
| Assessment against EU Data Protection Directive 95/46/EC requirements for MCCs | |||
| Findings Report | |||
| Tracker Scanning | |||
| Ongoing Guidance | |||
| Searchable Audit Trail | |||
| Dispute Resolution | |||
| Privacy Feedback Button | |||
| Verification | Optional | Optional |
If you want optional Verification, check out our EU-US Privacy Shield Verification solution.
Key Benefits
- Accountability-on-demand to respond to any inquiries, providing searchable evidentiary support of your privacy compliance
- Demonstrated privacy commitment to build trust with users, clients, business partners, and regulators
- Streamlined process minimizes disruption to your daily business operations and lightens the load for your in-house team
- Flexibility to extend assessment to certification with remediation guidance and verification
ASSESSMENT FEATURES
Our Assessments provide you with the information you need to take control with specific steps to mitigate risks.
Comprehensive Assessment
We first define the scope of assessment by business units, product/service lines, and digital properties (websites, apps, cloud platforms). Then determine whether to extend review to employee data or offline practices. A dedicated Privacy Solutions Manager (PSM) works with your team to efficiently guide discovery of necessary information, including relevant data flows. We then evaluate your privacy policies and practices against the EU-US Privacy Shield (which replaces “US-EU Safe Harbor”) Framework requirements.Findings Report
Our team delivers a findings report with a gap analysis dashboard and remediation recommendations so you have the privacy risk information you need to take actionable steps.Tracker Scanning
TRUSTe will apply proprietary scanning technology to the applicable digital properties providing comprehensive insight into personally identifiable information (PII) data collection, first and third party trackers on your property, and level of risk through the Privacy Sensitivity Index (PSI).Ongoing Guidance
You also get access to TRUSTe privacy experts for ongoing policy guidance, along with educational webinars, events, whitepapers, client advisories, privacy tips and research.Searchable Audit Trail
All of your assessment work and supporting documentation is available in a central repository for you to easily search, providing you with a way to respond to inquiries and demonstrate compliance for internal / external audits.Dispute Resolution
TRUSTe provides a third-party dispute resolution service, which helps you efficiently manage privacy inquiries from customers, and addresses the dispute handling requirements of the EU-US Privacy Shield (which replaces “US-EU Safe Harbor”) Framework.TRUSTe Privacy Feedback Button
We provide you with external demonstration to consumers, business partners and regulators that your company uses TRUSTe technology and tools to manage privacy related questions or concerns. The Powered by TRUSTe Privacy Feedback Button may be placed on your digital Privacy Policy page and links to a mechanism for consumers to submit questions or feedback.