U.S.-EU Safe Harbor Framework

Update on the U.S.-EU Safe Harbor Framework

On October 6, 2015, the European Court of Justice issued a judgment declaring invalid the European Commission’s July 26, 2000 decision on the legal adequacy of the U.S.-EU Safe Harbor Framework.  On July 12, 2016, the European Commission issued an adequacy decision on the EU-U.S. Privacy Shield Framework.  This new Framework, which replaces the Safe Harbor program, provides a legal mechanism for companies to transfer personal data from the EU to the United States.  The FTC will enforce the Privacy Shield Framework.  We continue to expect companies to comply with their ongoing obligations with respect to data previously transferred under the Safe Harbor Framework.  More information on the new framework is on the FTC’s Privacy Shield Framework page. Updated on July 25th, 2016.

Guidance

Letter expressing FTC commitment to protecting consumer privacy and the enforcement of the U.S.-EU Safe Harbor Program
Keynote Address by FTC Chairwoman Edith Ramirez at the Transatlantic Consumer Dialogue and Multi-Stakeholder Dialogue on the Transatlantic Trade and Investment Partnership