What Does Brexit Mean for Privacy Shield?
Three and a half years after UK citizens voted to leave the EU, the country officially left the Union on January 31. One of the many questions resulting from the departure is what happens to the EU-U.S. Privacy Shield as it applies to personal data transferred from the UK. The Commerce Department’s FAQs on Privacy Shield and the UK provide some answers; we highlight the key points below.
- Update its public commitment to specify that it will apply Privacy Shield protections to personal data transferred from the UK. The FAQs provide model language for this commitment. Entities that will use Privacy Shield to transfer employment data from the UK must also make a corresponding disclosure in their HR privacy policies.
- Maintain a current Privacy Shield certification, comply with Privacy Shield’s requirements, and continue to recertify annually.
- Privacy law 101
- Data security and breaches
- E-Mail, calls, and text marketing
Tags: EU, European Union, Privacy Sheild