This article discusses whether the United States Safe Harbor framework provides an adequate level of protection for European Union (EU) businesses that transfer personal data to U.S. companies.
The United States Safe Harbor framework was developed in 2000 by the U.S. Department of Commerce in collaboration with the European Commission (EC) to protect EU businesses that transfer personal data to U.S. companies so as to enable them to comply with the data export requirements of the EU Data Protection Directive.
Under the framework, U.S. businesses can self-certify on an annual basis that they will comply with a binding set of principles. Although the arrangement is voluntary, once a business signs up to the Safe Harbor register it assumes various legal obligations which are enforced by the U.S. Federal Trade Commission.