六合彩-香港六合彩 » SlideShare

945 views

Published on

.我脑袋沉沉的,但体内却是兴奋的,我感觉挺对不起小花的,因为我看蒋小红是越看越漂亮,越看越可爱,越看越觉得自己禽兽不如,竟然对小红有这种想法.另一方面我也痛恨自己,此时此景,我竟然老是忘却李雪长的什么样子,大概酒精让意识模糊了,模糊到把蒋小红看成李雪,把小花看成小草.
看错也就罢了,但是酒后男女共处一室就更为危险了.香港六合彩妈哥香港六合彩去我大嫂家商谈结婚的操办事宜,接留下我和小花小红三个人在家里看电视.倘若就我和小花或者是我和小红也没有什么大问题,但是一男两女醉醺醺的待在一起,可谓是定时炸弹放在体内,随时都有引爆的危险.蒋小花没喝酒,意识很清楚,香港六合彩说香港六合彩先进房间看医学书去,客厅现在就剩下我和小花两个人,这不存心让我犯

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
945
On SlideShare
0
From Embeds
0
Number of Embeds
9
Actions
Shares
0
Downloads
3
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide
  • 六合彩-香港六合彩 » SlideShare

    1. 1. THE U.S.-EU SAFE HARBOR: Requirements and Self Certification Procedures Lauren Saadat U.S. Department of Commerce International Trade Administration Office of Technology & E-Commerce
    2. 2. Implications of the different approaches to data flows and trade <ul><li>European Data Protection Authorities have broad legal authority to stop data flows. </li></ul><ul><li>Implications of EU Directive: </li></ul><ul><ul><li>According to the U.S. Census Bureau, Foreign Trade Division, in 2004, the U.S. and its top six European trade partners shared approximately $355 billion in trade. </li></ul></ul><ul><ul><li>Most of this trade could be dependent on the exchange of personally identifiable information. </li></ul></ul>
    3. 3. Finding a Solution <ul><li>U.S. and EU expressed commitment to bridge their different approaches to privacy while maintaining data flows and high level of privacy protection </li></ul><ul><li>FTC Act permitted each side to maintain their position </li></ul><ul><ul><li>U.S. companies made voluntary commitments </li></ul></ul><ul><ul><li>EU satisfied because FTC Act made those commitments legally binding </li></ul></ul>
    4. 4. Finding a Solution <ul><li>Safe Harbor registration is a voluntary “representation” to European business partners and European citizens that U.S. companies will comply with the framework. </li></ul><ul><li>Failure to comply with Safe Harbor could constitute an unfair or deceptive trade practice under FTC Act </li></ul><ul><ul><li>Could result in injunctions and redress </li></ul></ul>
    5. 5. Finding a Solution <ul><li>July 2000: U.S. Receives “adequacy” determination from European Commission for the Safe Harbor framework </li></ul><ul><li>However, U.S. companies only eligible if their regulator (i.e., FTC or DoT) agrees to enforce their commitments </li></ul>
    6. 6. The Safe Harbor Framework <ul><li>November 1, 2000: </li></ul><ul><ul><li>Safe Harbor becomes effective </li></ul></ul><ul><ul><li>DoC launches Safe Harbor website at http://export.gov/safeharbor </li></ul></ul>
    7. 7. What Is the Safe Harbor Framework? <ul><li>Safe Harbor framework includes: </li></ul><ul><ul><li>7 privacy principles </li></ul></ul><ul><ul><li>15 FAQ’s </li></ul></ul><ul><ul><li>EU’s “adequacy” determination </li></ul></ul><ul><ul><li>Letters between DoC and European Commission (EC); the Federal Trade Commission and the Department of Transportation and the EC; etc. </li></ul></ul>
    8. 8. Where Can We Find Information About It? <ul><li>Safe Harbor website includes: </li></ul><ul><ul><li>Safe Harbor List (currently more than 820 organizations, including multinationals and SMEs) </li></ul></ul><ul><ul><li>Safe Harbor Workbook </li></ul></ul><ul><ul><li>Compliance Checklist/Helpful Hints </li></ul></ul><ul><ul><li>Safe Harbor Documents (including principles, FAQ’s, correspondence, etc.) </li></ul></ul><ul><ul><li>Historical documents (including public comments) </li></ul></ul>
    9. 9. Helpful Hints <ul><li>Confirm the jurisdiction of FTC or DOT </li></ul><ul><li>Establish independent recourse mechanism </li></ul><ul><li>Ensure verification mechanism </li></ul><ul><li>Designate contact point </li></ul><ul><li>Develop Compliant Privacy Statement </li></ul><ul><ul><li>Conforms to principles </li></ul></ul><ul><ul><li>Makes specific reference to SH adherence </li></ul></ul><ul><ul><li>Provide accurate privacy policy statement location, available to the public </li></ul></ul>
    10. 10. Benefits of the Safe Harbor <ul><li>Benefits of Implementing the Safe Harbor Framework: </li></ul><ul><ul><li>Predictability and Continuity (all 25 Member States, plus EEA countries, bound by “adequacy” determination) </li></ul></ul><ul><ul><li>Eliminates need for prior approval to begin data transfers </li></ul></ul><ul><ul><li>Flexible privacy regime congenial to U.S. approach </li></ul></ul><ul><ul><li>Simpler/more efficient means of compliance </li></ul></ul>
    11. 11. Who may join the Safe Harbor? <ul><li>What organizations may join Safe Harbor?: </li></ul><ul><ul><li>U.S. Organizations subject to jurisdiction of the Federal Trade Commission with respect to unfair or deceptive acts or practices under Section 5 of the Federal Trade Commission Act or the U.S. Department of Transportation </li></ul></ul><ul><ul><li>Companies that are uncertain as to whether they fall under the jurisdiction of these agencies can seek clarification from the agencies. </li></ul></ul>
    12. 12. Who should join the Safe Harbor? <ul><li>What organizations should join Safe Harbor?: </li></ul><ul><ul><li>Organizations that receive personally identifiable information from EU member states must demonstrate “adequate” privacy protections </li></ul></ul><ul><ul><li>Organizations that have not identified another basis for demonstrating “adequacy” should consider joining Safe Harbor </li></ul></ul>
    13. 13. Compliance & Enforcement <ul><li>How and where will Safe Harbor be enforced?: </li></ul><ul><ul><li>In general, enforcement will take place in the U.S ., in accordance with U.S. law , and will rely, to a great extent, on private sector enforcement . </li></ul></ul><ul><ul><li>Private sector enforcement has three components: verification, dispute resolution, and remedies. </li></ul></ul>
    14. 14. Compliance & Enforcement <ul><li>Failure to comply with Safe Harbor requirements: </li></ul><ul><ul><li>If an organization persistently fails to comply with Safe Harbor requirements, it is no longer entitled to Safe Harbor benefits. </li></ul></ul><ul><ul><li>Independent recourse mechanisms are required to notify DoC of such facts. Safe Harbor list will indicate failure to comply. </li></ul></ul><ul><ul><li>Failure to comply may also result in an enforcement action by the FTC or DoT. </li></ul></ul>
    15. 15. The Safe Harbor Principles <ul><li>An organization entering the Safe Harbor must adhere to seven privacy principles: </li></ul><ul><li>Notice </li></ul><ul><li>Choice </li></ul><ul><li>Onward Transfer </li></ul><ul><li>Security </li></ul><ul><li>Data integrity </li></ul><ul><li>Access </li></ul><ul><li>Enforcement </li></ul>
    16. 16. The Safe Harbor Principles <ul><li>(7) Enforcement : Organizations must have the following enforcement mechanisms in place: </li></ul><ul><ul><li>follow-up procedures for verifying that safe harbor policies and mechanisms have been implemented </li></ul></ul><ul><ul><li>readily available and affordable independent recourse mechanisms to investigate and resolve complaints brought by individuals </li></ul></ul><ul><ul><li>obligations to remedy problems arising out of a failure by the organization to comply with the principles </li></ul></ul>
    17. 17. The Safe Harbor Principles <ul><li>Verification : </li></ul><ul><ul><li>An organization may use a self-assessment (in-house) or an outside/third-party assessment program. </li></ul></ul><ul><ul><li>Under self-assessment, a statement verifying the assessment should be signed by a corporate officer or other authorized representative at least once a year. </li></ul></ul><ul><ul><li>Under outside assessment, a verification statement should be signed either by the reviewer or by the corporate officer/authorized representative at least once a year. </li></ul></ul>
    18. 18. The Safe Harbor Principles <ul><li>Dispute Resolution : </li></ul><ul><ul><li>Organizations may choose to have disputes resolved by third-party dispute resolution programs (such as TRUSTe, BBBOnLine, DMA, AICPA WebTrust, JAMS, Entertainment Software Rating Board, etc.), or they may choose to cooperate and comply with the European Data Protection Authorities (DPA’s). </li></ul></ul><ul><ul><li>In the case of human resources data , the organization must agree to cooperate and comply with the DPA’s (See FAQ 9). </li></ul></ul>
    19. 19. The Safe Harbor Principles <ul><li>Human Resources Data: </li></ul><ul><ul><li>See FAQ 9 </li></ul></ul><ul><ul><li>Organizations transferring employee data from Europe to the U.S. must: </li></ul></ul><ul><ul><ul><li>Submit to the EU DPAs for purposes of dispute resolution; and </li></ul></ul></ul><ul><ul><ul><li>Comply with member state law regarding the use of information (i.e. processing requirements) as well as any restrictions under national law for transfer of such data. </li></ul></ul></ul><ul><ul><li>Access : Employers in the EU must comply with member state regulations and ensure that employees have access to such information. Organizations processing such data in the U.S. must provide access either directly or through the EU employer. </li></ul></ul>
    20. 20. The Safe Harbor Self-Certification Procedure <ul><li>How do organizations join Safe Harbor?: </li></ul><ul><ul><li>Organizations must comply with the framework’s requirements and publicly declare that they do so (see FAQ 6). </li></ul></ul><ul><li>Organizations that decide to join the Safe Harbor may do so by: </li></ul><ul><ul><li>Self-certifying via the Safe Harbor website at http://www.export.gov/safeharbor; or </li></ul></ul><ul><ul><li>Sending a letter to the Department of Commerce. </li></ul></ul>
    21. 21. The Safe Harbor Self-Certification Procedure (cont.) <ul><li>Once received, the DoC reviews the information submitted for completeness and to verify that the information submitted is consistent. </li></ul><ul><li>To be assured of Safe Harbor benefits, an organization needs to reaffirm its self-certification annually to the DoC. </li></ul><ul><li>The Safe Harbor includes a searchable list with compliance status. </li></ul>
    22. 22. Since Then and Moving Forward <ul><li>January 2002: First joint EC/DOC review of Safe Harbor completed </li></ul><ul><li>February 2002: EC submits interim report on functioning of the Safe Harbor </li></ul><ul><li>March 2002: Data Protection Authorities visit Washington </li></ul><ul><li>Late 2003: DoC and EC resume dialogue and review implementation of the Safe Harbor </li></ul><ul><li>October 2004: EC releases second report/staff working paper on Safe Harbor compliance/implementation </li></ul>
    23. 23. Other Options for Meeting the EU Directive’s Requirements <ul><li>Joining Safe Harbor is not the only means of meeting the EU Directive’s requirements </li></ul><ul><li>Other alternatives include: </li></ul><ul><ul><li>“ Unambiguous” consent </li></ul></ul><ul><ul><li>Necessary to perform contract </li></ul></ul><ul><ul><li>Codes of Conduct </li></ul></ul><ul><ul><li>Model Contract Clauses </li></ul></ul><ul><ul><li>Direct compliance/registration with EU Authorities </li></ul></ul>
    24. 24. Contact Information <ul><li>Questions? Comments?: </li></ul><ul><li>Lauren Saadat or Shannon Ballard </li></ul><ul><li>U.S. Department of Commerce </li></ul><ul><li>International Trade Administration </li></ul><ul><li>HCHB 2003 </li></ul><ul><li>14th & Constitution Avenues, NW </li></ul><ul><li>Washington, DC 20230 </li></ul><ul><li>Ph: (202) 482-3709 </li></ul><ul><li>E-mail: Lauren.Saadat@mail.doc.gov </li></ul><ul><li> [email_address] </li></ul>

    ×