The U.S. Department of Commerce spells out 13 details of an organization's privacy practices that must be provided "in clear and conspicuous language when individuals are first asked to provide personal information to the organization or as soon thereafter as is practicable ... " in order to comply with the EU-U.S. Privacy Shield.