US-EU Safe Harbor

European Union, USA

US-EU Safe Harbor Framework, Also known as the US-EU Safe Harbor.

A streamlined process for US organizations to transfer personal data from European Union (EU) countries to the US in compliance with the EU Data Protection Directive.

The Directive generally prohibits transfers of personal data from the EU to countries that do not meet EU requirements for "adequate" data privacy protection laws (including the US). Certifying to the US-EU Safe Harbor privacy requirements is one of several exceptions permitted under the Directive that US organizations can rely on to permissibly transfer personal data from the EU to the US. A participating organization must annually file a certification with the US Department of Commerce stating its compliance with certain specified privacy principles. It must also have a published privacy policy that includes a statement confirming its compliance.

The US Department of Commerce provides more information on the US-EU Safe Harbor (), including how to qualify, and a list of all organizations that have filed self-certification letters ().