Complying with the year-old Privacy Shield, which provides a legal basis for the transfer of personal data from the European Union to the United States, is “an ongoing exercise,” partner Lisa Sotto told DataGuidance. “Certified organisations understand that they need to constantly ensure that all relevant aspects of their business comply with the Privacy Shield principles,” she said, “and that the day on which they certify under the Privacy Shield is only the beginning, not the end, of their compliance journey.”

Read International: Privacy Shield review shows European Commission’s “shift in focus,” DataGuidance, October 26, 2017. (Subscription).