XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 5, wd13
    • Fix Version/s: wd14
    • Component/s: core
    • Labels:
      None
    • Proposal:
      Hide

      Either
      i) Remove it from 5.1 and 1.4
      Or
      ii) Replace it with a reference to the EU-U.S. Privacy Shield Framework

      Show
      Either i) Remove it from 5.1 and 1.4 Or ii) Replace it with a reference to the EU-U.S. Privacy Shield Framework
    • Resolution:
      Hide

      Replaced it with a reference to the EU-U.S. Privacy Shield Framework

      Show
      Replaced it with a reference to the EU-U.S. Privacy Shield Framework

      Description

      We need to check all the references in 1.3 and 1.4, but I have spotted one that needs replacing (or removing).

      The following reference appears in 1.4
      [USEUSAFEHARB]
      U.S.-EU Safe Harbor
      http://export.gov/safeharbor/eu/eg_main_018365.asp

      It's used in the last paragraph of 5.1 ... "In addition to technical security issues there could also be geographic (e.g. U.S.-EU SafeHarbor [USEUSAFEHARB]), industry specific (e.g. PCI DSS [PCIDSS]) and regulatory considerations (e.g. Sarbanes-Oxley [SARBANES])".

      If you follow the link you will see it says

      On October 6, 2015, the European Court of Justice issued a judgment declaring as “invalid” the European Commission’s Decision 2000/520/EC of 26 July 2000 “on the adequacy of the protection provided by the safe harbour privacy principles and related frequently asked questions issued by the US Department of Commerce.” As a result of that decision, the U.S.-EU Safe Harbor Framework is not a valid mechanism to comply with EU data protection requirements when transferring personal data from the European Union to the United States.

      On July 12, 2016, U.S. Secretary of Commerce Penny Pritzker joined European Union Commissioner Věra Jourová to announce the approval of the EU-U.S. Privacy Shield Framework as a valid legal mechanism to comply with EU requirements when transferring personal data from the European Union to the United States. The EU-U.S. Privacy Shield Framework replaces the U.S.-EU Safe Harbor Framework. The Department began accepting certifications on August 1, 2016.

        Attachments

          Activity

            People

            • Assignee:
              ragupta2 Rahul Gupta (Inactive)
              Reporter:
              peterniblett Peter Niblett (Inactive)
            • Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: