5 ms·
To nitpick somewhat, at least in the case of the US-EU safe harbor protection, it meant that certified providers were to provide the same protection to European
by pilsetnieks 13y ago
To nitpick somewhat, at least in the case of the US-EU safe harbor protection, it meant that certified providers were to provide the same protection to European data as it would have in the EU under the relevant EU directive, it doesn't have anything to do with location of the servers. The certification, however, is a complete joke since companies can self-assess and register themselves as safe harbor compliant.
- Silhouette 13y agoThe certification, however, is a complete joke since companies can self-assess and register themselves as safe harbor compliant. And this creates a genuine difficulty for EU businesses, because it's no longer credible to claim that you thought a US business was compliant because of safe harbour arrangements. It may therefore not actually be legal under European laws to export personal data to those US businesses any more. If any European company did so, and as a result there were negative consequences for the subject of the data, that could lead to a nasty lawsuit for the company that did it, even if their actions would have been considered reasonably diligent because of safe harbour a few years ago.