In recent years, the internet has connected the general public across continents. Notably, it can be expected that data can easily travel across countries in a blink of an eye, without any delay and on a daily basis. The transfer of data is an important part in business as well. With any multinational entity, personal data crossing countries is inevitable. However, each country may have different guidelines that a business must ensure compliance.
Recently, the European Union announced a new change to its privacy laws. Formerly, it would allow American, and other businesses, to obtain a “pass” for its privacy laws by certifying themselves as compatible for its safe harbors scheme. This safe harbor scheme requires a business to meet standards for privacy protection. However, on October 6, 2015, the European Court of Justice ruled that the previous system for allowing corporations to obtain accreditation, and shifting data between the United States and Europe, was improper due to the current intelligence methods in the United States. This oversight ended the safe harbor provision.
The new rules establish a Privacy Shield register and a free alternative dispute resolution system. The organizations will have to self certify annually, with verification by the Department of Commerce, and comply with the Privacy Shield framework. As part of compliance, organizations must provide a response within 45 days and create a no-cost independent recourse system where complaints and disputes will be resolved in a timely manner. In addition, the European residents will be able to pursue legal action for claims such as, misrepresentation, and the participants must commit to binding arbitration at the European citizen’s request.