Onward transfer of data to suppliers
One of the key aspects of the Safe Harbor program regards the onwards transfer of data to third party suppliers.
Under US laws a company can transfer responsibility for the privacy of data and personal information to its suppliers. In the event of a breach the supplier is responsible for the security and response.
However, the US Safe Harbor program allows US companies to comply with the EU data directive. Under these requirements the original company remains responsible for the data, even once its transferred. In addition this this the company must not transfer the data to companies that it cannot vouch for.
