3 ms·
Ask HN: EU firms: Data Protection compliance if processing credit cards in USA?
Startups based in the EU:
If you are processing payments or storing/vaulting credit cards using US services, how are you complying with the Data Protection Directive [1]?
Is the service Safe-Habor-registered? [2]
[1] http://en.wikipedia.org/wiki/Directive_95/46/EC_on_the_protection_of_personal_data
[2] http://www.export.gov/safeharbor
- wodow 14y agoI am asking in general, but am specifically interested in Spreedly. They are storing credit card data (which counts as "processing" "personal data") for many EU firms but don't appear to be Safe Harbor accredited.