Safe Harbor
About one quarter of suppliers of cloud services observe the principles of Safe Harbor (according to Analysys Mason). It the rules extending to the organizations of the USA and the European Union which collect and store data of the clients. They aim not to allow accidental disclosure or information leak.
Within these requirements of the company are certified taking into account respect for the following seven aspects:
- the notification by means of which all clients should be informed that their data remain and as they will be used;
- the choice, i.e. clients have an opportunity not to agree their data remained and transferred to the third parties;
- data transmission to the third parties which can be performed only to the organizations observing the corresponding principles of data protection;
- data protection, i.e. reasonable measures to exclude leak of collected information;
- integrity of data; it means that all data necessary and sufficient for that purpose with which they gather are collected;
- access: clients have an information access about them which they can correct or delete if it is incorrect;
- implementation which requires that these rules were properly implemented in practice.
2014: Safe Harbor was not the so safe harbor
According to the Technical Center Internet, the American human rights organization "Center of Digital Democracy" addressed to Federal trade commission of the USA with the requirement to investigate activity 30 large technology and[1]. According to activists, these American companies roughly violate the agreement between the EU and the USA known as Safe Harbor ("safe harbor").
The agreement Safe Harbor declares the principles on which personal data of the European users can be stored and be processed in the territory of the USA. In it, certainly, both the maximum protection of these data, and impossibility of their transfer to the third parties, and many other very correct things are stipulated. However in practice, are sure of CDD, these principles are constantly ignored by the American companies among which such giants of the market as AOL and Adobe. In particular, since that moment as personal data of the European users appear in the American centers of storage and data processing, they can be requested by law enforcement agencies of the USA. According to the head of legal service of CDD Hudson Kingston, in filed in the FTC document systematic violations of the provisions Safe Harbor are in detail described. "Fundamental right of 500 million Europeans to protection of their private life is ignored, it it is necessary to recognize and take measures", - he told.
