International Safe Harbor; Complying with EU Data Privacy

  With the expansion of LashBack email intelligence and compliance services in Europe and the acquisition of new European sources of data, LashBack becomes a truly global company. In order to ensure our data is protected and in full compliance with EU Data Privacy standards, LashBack has recently chosen to enroll in the International Safe Harbor program.

US-EU Safe Harbor is the process by which US companies comply with EU Directive 95/46 EC on the protection of personal data. LashBack was officially added to the Safe Harbor list February 25, 2009, and must obtain new certification each year. In order to comply with the EU Directive and obtain Safe Harbor, LashBack data must meet the following seven privacy principles: Notice, Choice, Onward Transfer, Security, Data Integrity, Access, and Enforcement.

• Notice– Individuals must be informed that their data is being collected and about how it will be used.
• Choice– Individuals must have the ability to opt out of the collection and forward transfer of the data to third parties.
• Onward Transfer– Transfers of data to third parties may only occur to other organizations that follow adequate data protection principles.
• Security–  Reasonable efforts must be made to prevent loss of collected information.
• Data Integrity– Data must be relevant and reliable for the purpose it was collected for.
• Access– Individuals must be able to access information held about them, and correct or delete it if it is inaccurate.
• Enforcement– There must be effective means of enforcing these rules.

 LashBack is regulated by the Federal Trade Commission and has contracted with the Better Business Bureau to investigate and resolve complaints. More can be read about Safe Harbor at Export.gov.