The EU-US Privacy Shield Framework was designed by the U.S. Department of Commerce and European Commission to provide companies on both sides of the Atlantic with a mechanism to comply with EU data protection requirements when transferring personal data from the European Union to the United States in support of transatlantic commerce.
Applicable are one of the early adopters of Privacy Shield as the replacement to Safe Harbor. Throughout the move to Privacy Shield Applicable continue to adhere to the highest standards of Data Protection and working with our advisors, Privacy Trust, ensure we comply with all that the EU-U.S. Privacy Shield requires.
Applicable continues to review our information security policies and will be continuously adding to our best practices and certification to ensure we are performing as our partners and customers require. If you require any additional information regarding any of these policies please contact us.
Updated Guidance: Privacy Shield and the United Kingdom
The International Trade Administration's Privacy Shield Team would like to make you aware of updated guidance explaining how a Privacy Shield participant may rely on the EU-U.S. Privacy Shield Framework to receive personal data from the United Kingdom in light of the UK's withdrawal from the EU. The guidance is available on the Privacy Shield website at: https://www.privacyshield.gov/article?id=Privacy-Shield-and-the-UK-FAQs and is included below for your convenience.
Can a Privacy Shield participant rely on the EU-U.S. Privacy Shield Framework to receive personal data from the United Kingdom in light of the UK's withdrawal from the EU?
UPDATED January 31, 2020
Under the Withdrawal Agreement, EU law (including EU data protection law) will continue to apply to and in the UK during the Transition Period from January 31, 2020, until December 31, 2020.
During the Transition Period, the European Commission's decision on the adequacy of the protection provided by Privacy Shield will continue to apply to transfers of personal data from the UK to Privacy Shield participants. In addition, the United States will consider a Privacy Shield participant's commitments to comply with the Framework to include personal data received from the UK in reliance on Privacy Shield with no additional action on the part of a participant required.
Applicable make the commitment and will have prior to the end of the Transition Period undertaken necessary steps as required to remain compliant and provide confidence on personal data movements.