Professional Documents
Culture Documents
Todays Speakers
Josh Harris
Director of Policy
TRUSTe
Shannon Coe
Team Lead, Data Flows and Privacy
U.S. Department of Commerce
John Bowman
Senior Principal
Promontory
Agenda
Introduction and Overview
Josh Harris, Director of Policy, TRUSTe
Audience Q&A
Demo of TRUSTe EU Data Privacy Transfer Assessment
Privacy Insight Series
v
13 EC Recommendations
Transparency
Redress
13 EC Recommendations
Enforcement
Access by US authorities
The Privacy Shield adds an important new avenue to supplement the others.
Companies now will commit to participate in arbitration as a matter of last
resort to ensure that EU individuals who still have concerns will have the
opportunity to seek legal remedies.
Privacy Insight Series
v
10
In connection with finalization of the new EU-U.S. Privacy Shield, the U.S. Intelligence
Community has described in writing for the European Commission the multiple layers of
constitutional, statutory, and policy safeguards that apply to its operations, with active
oversight provided by all three branches of the U.S. Government.
The Privacy Shield provides, for the first time, a specific channel for EU individuals to raise
questions regarding signals intelligence activities relating to the Privacy Shield. As a part of
this process, the United States is making the commitment to respond to appropriate requests
regarding these matters, consistent with our national security obligations.
Privacy Insight Series
v
11
12
IL - State of Israel
IM - Isle of Man
JE - Jersey
NZ - New Zealand
US - United States - Safe Harbour
UY - Eastern Republic of Uruguay
The effect of these adequacy decisions is that personal data can flow from the 28 EU countries
and three EEA member countries (Norway, Liechtenstein and Iceland) to that third country
without any further safeguard being necessary.
13
14
WP29 will then complete its assessment for all personal data transfers to the US before
holding an extraordinary plenary session where consideration will be given as to whether
other transfer mechanisms (e.g. Binding Corporate Rules and Standard Contractual
Clauses) can be used for personal data transfers to the US
The Commission and the Article 31 Committee will then consider the report of WP29 and
act on the recommendations accordingly
The European Parliament may in the meantime issue a letter, opinion or request that the
Commission attend the Parliament
15
Questions?
16
Contacts
Josh Harris
John Bowman
jharris@truste.com
jmbowman@promontory.com
17
Thank You!
Stay on the call for a
LIVE DEMO of TRUSTe EU Data Privacy Transfer Assessment
18
Joanne Furtsch
Director of Product Policy,
TRUSTe
19
20
Thank You!
Dont miss the next webinar in the Series Investment in Privacy Brings
Security Results with Chris Babel, TRUSTe and Sam Pfeifle, IAPP on
March 10th
See http://www.truste.com/insightseries for details of our 2016 Privacy
Insight Series and past webinar recordings.
v
Privacy Insight Series
v
21