Safe Harbour - What It Means For Tech Companies

Image credit: LinkedIn

What is Safe Harbour?

In 2000 an agreement called Safe Harbour came into force in the EU that prohibited citizens' personal data from being sent to places that don't have proper privacy protections. It was decided that American firms could self-certify that data being sent to their data centres would be properly protected, so that transfers to the US wouldn't be slowed down. 

What went wrong with Safe Harbour?

Everyone has heard of the whistleblower Edward Snowden, well in 2013 he leaked documents outlining the US security services' cyber-spying operations, which caused outrage throughout the world. Privacy campaigners have now been questioning what data sites like Facebook have been sharing with the NSA. However, up until recently there was no way of knowing as they were protected under the Safe Harbour agreement. But that's all about to change….Last October a court ruled that national data watchdogs need to review all transfers of data on an individual basis, but an agreement needed to be made with the US first.

What does this mean for tech companies?

Since October Europe and the US have been in negotiations regarding a new data transfer act and were meant to reach an agreement by January 31, however just when they looked like they were no closer to making a compromise, they formed the "EU-US Privacy Shield". Tech companies must be relieved as EU regulators were on the verge of enforcing a data transfer clampdown if an agreement hasn't been made soon. 

The new EU-US Privacy Shield, which will still allows the easy transfer of EU citizens' data, come with promises of better privacy protections from the US. Essentially, Europe is making the US abide by the same data protection standards found in the EU. Tech companies will also face regular compliance checks to ensure that they are still following the deal's rules.

Andrus Ansip, European commissioner for the digital single market said: “We have agreed with our US partners a new framework that will ensure the right checks and balances for our citizens.”

Vera Jourova, European commissioner for justice, said: “For the first time ever, the US has given the EU binding assurances that the access of public authorities for national security purposes will be subject to clear limitations, safeguards and oversight mechanisms.”

Are you still reluctant to share personal data? Let us know your thoughts! 

360ict provides managed IT services and support for SMEs in central London and the south-east, including Croydon and Bromley. For more advice on gaining competitive advantage as a mid-sized company, give us a call on 0208 663 4000 or head to our website. 

6 Ways To Keep Your Company's Data Secure

Image via UK Security Jobs

Over the last few years the media has regularly reported on high-profile data breaches, with cheating site Ashley Madison - where the personal details of around 32 million members were leaked - being the latest company in the limelight. The loss of data has had a major impact on big corporations from financial to breach of trust. However, it’s not just the big companies that get targeted, SMEs are too. In the US last year a staggering $3.5 million losses were recorded from an average data breach. 

This week protection specialist Bit9 + Carbon Black released a survey showing that consumers in Britain are increasingly concerned that there are many data breaches companies have yet to discover. The researchers found that high-profiled security breaches have led to increased fear among the public, with 81% of people worrying that cyber criminals might've already stolen their data without anyone noticing. 

But you can put your customers minds at rest by adopting these six practices from 360ict:

- Stay up-to-date with software, data security news and internal reports

Updating all the software you use daily is essential to keeping your business secure. This includes operating systems and anti-virus software. 

- Create and follow suitable security and backup procedures

Security and backup procedures differ for each company, it’s always worth talking to a risk management expert. 

- Monitor security hazards, regulation and compliance

- Track your digital data

It’s important to understand what data is business-critical or sensitive and what isn’t. You must track this data and identify how it’s used and where it’s stored.

- Manage access to onsite data and protect data taken offsite

One of the main security hazards we face at the moment is the Bring Your Own Device (BYOD). Locking down your data on the move has always been important but now companies need to control data on employees devices and accounts as well as on storage platforms. Picking the correct storage platform is also essential, with many companies opting for the cloud.

- Correctly dispose of data, documents, and equipment that stores data

360ict provides managed IT services and support for SMEs in central London and the south-east, including Croydon and Bromley. For more advice on gaining competitive advantage as a mid-sized company, give us a call on 0208 663 4000 or head to our website.