This site provides information to help European businesses interested in transferring personal data to U.S. businesses under the Privacy Shield.
How to Verify an Organization's Privacy Shield Commitments
The Privacy Shield List enables EU or Swiss companies to verify whether data can be transferred to a U.S.-based company under the Framework.View
Contract Requirements for Data Transfers to a Processor
Data controllers in the EU and Switzerland are required to enter into a contract when a transfer is made for processing purposes only, regardless of whether the recipient is a Privacy Shield Participant. Under the Privacy Shield, this contract does not require prior approval and need not include standard contractual clauses.View
U.S. Subsidiaries of European Businesses' Participation in Privacy Shield
A U.S.-based subsidiary of an European-headquartered company can join the Privacy Shield as long as the subsidiary meets the eligibility requirements for Privacy Shield participation.View