US-EU Safe Harbor — Guidance and Resources

The IAPP published a series of Safe Harbor guidance resources, reports, web conferences and articles, which can be found below.


Published: April 2016


The US-EU Safe Harbor agreement between the European and United States, invalidated by the Court of Justice of the European Union in 2015, that allowed for the legal transfer of personal data between the EU and U.S. in the absence of a comprehensive adequacy decision for the United States. It was replaced by the EU-U.S. Privacy Shield in 2016.

Across 2015 and 2016, the IAPP published a series of Safe Harbor guidance resources, reports, web conferences and articles, which can be found below.

A Brief History of Safe Harbor (2000-2016)

This document provides a historical timeline of the EU-US Safe Harbor agreement.

FTC Enforcement of the U.S.-EU Safe Harbor Framework

This document offers this study examining the U.S. Federal Trade Commission’s Safe Harbor enforcement record for practices and trends that may inform its efforts under the new Privacy Shield.

Safe Harbor — More Than Just a $200 Investment

This document provides insight on how Safe Harbor advanced beyond what was initially viewed as a simple $200 investment from an organization, into an agreement that regulators began performing audits upon and taking action against violations.

Safe Harbor: Answers to All Your Questions

This five-part article series, published by Angelique Carson, provides answers to questions on the EU-US Safe Harbor agreement from IAPP members.