U.S.-EU Safe Harbor Framework Documents
The documents listed and published below constitute the "safe harbor" privacy framework that the U.S. Department of Commerce has negotiated with the European Commission.
The U.S.-EU Safe Harbor Framework is set forth in a set of 7 privacy principles, 15 frequently asked questions and answers (FAQs), the European Commission's adequacy decision, the exchange of letters between the Department and the European Commission, and letters from the Federal Trade Commission and the Department of Transportation on their enforcement powers. The U.S.-EU Safe Harbor Framework includes the final documents issued by the United States and published in the Federal Register on July 24, 2000 and September 19, 2000, and by the European Commission on July 28, 2000.
I. U.S. DOCUMENTS - July 2000
A. Cover Letter from Acting Under Secretary for International Trade Administration Robert S. LaRussa
B. U.S.-EU Safe Harbor Privacy Principles
C. Frequently Asked Questions (FAQs)
4. Investment Banking and Audits
5. The Role of the Data Protection Authorities
7. Verification
8. Access
11. Dispute Resolution and Enforcement
12. Choice - Timing of Opt-out
14. Pharmaceutical and Medical Products
15. Public Record and Publicly Available Information
E. U.S.-EU Safe Harbor Enforcement Overview
G. Letter from the Federal Trade Commission concerning its jurisdiction over consumer privacy issues
II. EUROPEAN COMMISSION DOCUMENTS - July 2000
A. Letter from Commission Services transmitting the European Commission's Adequacy Finding
B. European Commission's decision C(2000) 2441 finding the safe harbor to provide adequate protections
C. Text on Non-Discrimination adopted by the Article 31 Committee on May 31, 2000
D. Text on Non-Discrimination adopted by the Article 29 Working Party on February 3, 2000
.
Standard Contractual Clauses
On January 19, 2001, the European Commission released its draft of standard contractual clauses (model contract provisions) to be used by U.S. organizations as an alternative to compliance with the EU Directive on Data Protection.
On June 15, 2001 the European Commission approved its draft of the standard contractual clauses.
On February 5, 2010 the European Commission adopted a decision updating the standard contractual clauses.
.
Archives
Documents and public comments provided through the duration of the U.S.-EU Safe Harbor Framework negotiations can be accessed in our Historic Documents section.