European Businesses

This site provides information to help European businesses interested in transferring personal data to U.S. businesses under the Privacy Shield.

Download Overview

How to Verify an Organization's Privacy Shield Commitments

The Privacy Shield List enables EU or Swiss companies to verify whether data can be transferred to a U.S.-based company under the Framework.


Contract Requirements for Data Transfers to a Processor

Data controllers in the EU  and Switzerland are required to enter into a contract when a transfer is made for processing purposes only, regardless of whether the recipient is a Privacy Shield Participant. Under the Privacy Shield, this contract does not require prior approval and need not include standard contractual clauses


U.S. Subsidiaries of European Businesses' Participation in Privacy Shield

A U.S.-based subsidiary of an European-headquartered company can join the Privacy Shield as long as the subsidiary meets the eligibility requirements for Privacy Shield participation.