Safe Harbor Invalid — Tips for Things to Do About It

A couple of weeks ago, we posted about the invalidation of Safe Harbor and what to do about it. Today starts the first task, to accomplish weekly, so that you may be prepared for the next version of the Safe Harbor regulations that will control data transfers across the Atlantic.

This week’s task is to focus on the DPAs i.e. the Data Protection Authorities. These individuals are appointed within each European country. If you have an office in the EU, you might need to register that office with your local DPA. If you haven’t yet, then that is what you should add to your “to do” list this week (resource link below).

If you do not have an office anywhere in Europe, then your task for this week is to determine where most of your business in Europe is concentrated. Where are most of your customers, end users or vendors located? For example, if most of your customers are in Ireland, then find out who the DPA is in Ireland. There are a lot of great resources for finding a DPA, such as the IAPP website, but even a Google search will be productive. And they do have their own websites with helpful information (I have provided a link to the UK DPA below and another helpful resource).

France recently announced that if businesses do not have model contract clauses in place with their American suppliers by the end of January, then enforcement is likely. That is one of many reasons why it is so important to take steps now so that your business is ready. So, find your local DPA. If required, make sure you are registered. If you are not required to be registered, then figure out which DPA is best for your business.

More to come!

The purpose of this blog is for information only and may not be construed as creating an attorney-client relationship and this blog may be considered advertising in some jurisdictions under the applicable law and ethical rules. The determination of the need for legal services and the choice of a lawyer are extremely important decisions and should not be based solely upon advertisements or self-proclaimed expertise. No representation is made that the quality of the legal services to be performed is greater than the quality of legal services performed by other lawyers.