GDPR and Data Privacy Framework

GDPR

The General Data Protection regulation (GDPR) is a set of laws enacted in the European Union (EU) in 2018. It has specific requirements referencing the transfer of data out of the EU, one of which is that the transfer must happen only to those countries considered as having adequate data protection laws. In general, the EU does not list the US as one of those countries. At this point, Privacy Shield allows US companies, or EU companies working with US companies, to meet this specific requirement of the GDPR.

Data Privacy Framework

Designed by the U.S. Department of Commerce and the European Commission to provide companies on both sides of the Atlantic with a mechanism to comply with data protection requirements when transferring personal data from the EU and Switzerland to the US in support of transatlantic commerce.

DataBank’s certification demonstrates that our customer privacy procedures comply with the Privacy Shield Principles, covering a range of requirements, including: Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability. DataBank’s customers can be assured that their programs comply with these stringent privacy and security safeguards.