PrivacyTrust Safe Harbor program
The PrivacyTrust (formerly eTrust) Safe Harbor program was designed to assist companies self-certifying to the U.S. Department of Commerce that they comply with the U.S.-EU Safe Harbor Framework and/or the U.S.-Swiss Safe Harbor frameworks as set forth by the U.S. Department of Commerce. The PrivacyTrust Safe Harbor program provided guidance prior to and during the self-certification application process, along with support afterwards. PrivacyTrust provided such companies with a dispute resolution service (independent recourse mechanism) and an outside compliance review (verification) service.
The U.S.-EU and U.S. Swiss Safe Harbor Frameworks were developed by the U.S. Department of Commerce in consultation with the European Commission and Swiss Government, and with industry and other stakeholders, to provide companies on both sides of the Atlantic with a valid legal mechanism to comply with data protection requirements when transferring personal data from the European Union (EU) and Switzerland to the United States in support of transatlantic commerce.
The Safe Harbor program administered by the U.S. Department of Commerce enabled U.S.-based companies to join one or both of the Safe Harbor Frameworks in order to benefit from the adequacy determinations. To join either Safe Harbor Framework, a U.S.-based company would be required to self-certify to the Department of Commerce and publicly commit to comply with the Safe Harbor Privacy Principles, including the Frequently Asked Questions. While joining Safe Harbor was voluntary, once an eligible company made the public commitment to comply with the requirements, the commitment would become enforceable under U.S. law.
The U.S.-EU and U.S. Swiss Safe Harbor Frameworks, which are no longer valid legal mechanisms to comply with data protection requirements when transferring personal data from the EU and Switzerland to the United States, have been replaced by the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks.
The PrivacyTrust Safe Harbor program has been replaced by the PrivacyTrust Privacy Shield program