BBB EU Privacy Shield

The EU-U.S. and Swiss-U.S. Privacy Shield Frameworks are a mechanism for legally transferring personal data from the European Union and Switzerland to the United States. Designed by the U.S. Department of Commerce to support transatlantic commerce in coordination with the European Commission, in 2016, and Swiss Administration, in 2017, the Privacy Shield Frameworks replace the former US-EU Safe Harbor Framework. The Privacy Shield promotes greater transparency around international data processing and enables U.S. businesses to demonstrate that their privacy practices meet data protection requirements such as GDPR, including enhanced protections for consumers. 

Among other requirements, a participating organization must provide you: 

• Information on the types of personal data collected;
• Information on the purposes of collection and use;
• Information on the type or identity of third parties to which your personal data is disclosed;
• Choices for limiting use and disclosure of your personal data;
• Access to your personal data;
• Notification of the organization’s liability if it transfers your personal data;
• Notification of the requirement to disclose your personal data in response to lawful requests by public authorities;
• Reasonable and appropriate security for your personal data;
• A response to your complaint within 45 days;
• Cost-free independent dispute resolution to address your data protection concerns; and
• The ability to invoke binding arbitration to address any complaint that the organization has violated its obligations under the Principles to you and that has not been resolved by other means. 

The program is an independent dispute resolution mechanism operated by BBB National Programs, a non-profit organization based in the United States. We help EU and Swiss individuals resolve privacy complaints under the EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield Frameworks. 

You can learn more about the steps to file a complaint by visiting this page:  For EU Consumers.