Easyship & the Privacy Shield Framework

Last updated on: 22nd October, 2020

What are the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks?

The EU-U.S. and Swiss-U.S. Privacy Shield Frameworks (“Privacy Shield”) were designed by the U.S. Department of Commerce and the European Commission and Swiss Administration, respectively, to provide companies on both sides of the Atlantic with a guideline to follow for transferring and protecting personal data in support of transatlantic commerce.

Is Easyship Privacy Shield certified?

Yes! Easyship complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework (Privacy Shield) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and the United Kingdom and Switzerland to the United States in reliance on Privacy Shield. To learn more about the Privacy Shield program, and to view our current certification, please visit https://www.privacyshield.gov.

Does Safe Harbor still exist?

No. As of 2020, no country recognizes the Safe Harbor Framework.

What does the Privacy Shield certification mean for Easyship customers?

Easyship is dedicated to protecting our customer’s data. Our customers can feel confident that we are taking all the necessary steps to keep their personal data secure while operating our services. The Privacy Shield provides enhanced data protection standards while also affording individuals with additional avenues for redress when they have complaints.

The Privacy Shield Frameworks are based on the following principles:

  • Strong safeguards on how companies handle user data: Under the Privacy Shield, the U.S. Department of commerce will regularly update and review participating companies to ensure compliance with the rules they have self-certified or face sanctions.
  • Protection and transparency on U.S. government access to data: The U.S. has provided the EU and Switzerland with assurances that public authorities, law enforcement and national security will have clear safeguards, limitations and oversight when accessing user data.
  • Protection of individual rights: Individuals that believe a company under the Privacy Shield has misused their data has clear options for recourse through dispute resolution mechanisms.
  • Annual joint review mechanism: Under this mechanism, the Privacy Shield Frameworks will be monitored and updated, including assurances on how law enforcement and national security agencies access and handle user data.

You can find more information about how Easyship protects your privacy, how Easyship is compliant to the GDPR, and how Easyship processes your data through the below links:

UPDATE: As of a ruling on July 16, 2020, by the Court of Justice of the European Union, the EU-U.S. Privacy Shield was rendered “invalid.” Then, on September 8, 2020, the Federal Data Protection and Information Commissioner (FDPIC) of Switzerland opined that the Privacy Shield doesn’t provide an adequate level of protection for data transfers.

Because of these decisions, the Privacy Shield is no longer considered a valid mechanism for data protection internationally between the US and the EU or Switzerland.