Safe Harbour - What It Means For Tech Companies

Image credit: LinkedIn

What is Safe Harbour?

In 2000 an agreement called Safe Harbour came into force in the EU that prohibited citizens' personal data from being sent to places that don't have proper privacy protections. It was decided that American firms could self-certify that data being sent to their data centres would be properly protected, so that transfers to the US wouldn't be slowed down. 

What went wrong with Safe Harbour?

Everyone has heard of the whistleblower Edward Snowden, well in 2013 he leaked documents outlining the US security services' cyber-spying operations, which caused outrage throughout the world. Privacy campaigners have now been questioning what data sites like Facebook have been sharing with the NSA. However, up until recently there was no way of knowing as they were protected under the Safe Harbour agreement. But that's all about to change….Last October a court ruled that national data watchdogs need to review all transfers of data on an individual basis, but an agreement needed to be made with the US first.

What does this mean for tech companies?

Since October Europe and the US have been in negotiations regarding a new data transfer act and were meant to reach an agreement by January 31, however just when they looked like they were no closer to making a compromise, they formed the "EU-US Privacy Shield". Tech companies must be relieved as EU regulators were on the verge of enforcing a data transfer clampdown if an agreement hasn't been made soon. 

The new EU-US Privacy Shield, which will still allows the easy transfer of EU citizens' data, come with promises of better privacy protections from the US. Essentially, Europe is making the US abide by the same data protection standards found in the EU. Tech companies will also face regular compliance checks to ensure that they are still following the deal's rules.

Andrus Ansip, European commissioner for the digital single market said: “We have agreed with our US partners a new framework that will ensure the right checks and balances for our citizens.”

Vera Jourova, European commissioner for justice, said: “For the first time ever, the US has given the EU binding assurances that the access of public authorities for national security purposes will be subject to clear limitations, safeguards and oversight mechanisms.”

Are you still reluctant to share personal data? Let us know your thoughts! 

360ict provides managed IT services and support for SMEs in central London and the south-east, including Croydon and Bromley. For more advice on gaining competitive advantage as a mid-sized company, give us a call on 0208 663 4000 or head to our website. 

Standard Chartered To Combat Cybercrime By Hiring Former UK Surveillance Chief

Image credit: Reuters

Standard Chartered has appointed Iain Lobban to its new financial crime committee to bolster its cyber defence strategy.

The former head of Britain’s security and intelligence body, GCHQ, will become a member and senior advisor to the committee. Lobban will be responsible for matters including anti-money laundering, sanctions compliance and prevention of corruption.

Lobban was director of the UK’s electronic intelligence gathering agency from mid-2008 to late 2014 and Standard Chartered said cybersecurity had been at the heart of Lobban's role in recent years.

Cyber criminals pose a rising threat to businesses across the UK. Businesses are being targeted by increasingly sophisticated criminals trying to steal money, client data or innovative ideas, score political points or to simply cause havoc. Many companies make the mistake of thinking their greatest risks are external ones like burglary or flooding — they underestimate the danger of internal failures in data security and data protection.

Standard Chartered announced the committee a day after U.S authorities extended monitoring of the bank, which follows the institution’s $667 million fine in 2012 over violations related to U.S sanctions.

As cyber attacks are becoming more frequent, it’s advised that businesses take precautions to combat these attacks. We offer SMEs across the UK industry-leading solutions designed to solve mainstream IT problems spanning over three distinct markets: data storage, data protection and disaster recovery. Our solutions combat crime and improve conduct and compliance capabilities.

To make sure your organisation is compliant with all data security and data protection regulations, have our experts carry out an on-site review. To talk to us about your options, call 0208 663 4000 or contact us via our website.

360ict provides managed IT services and support for SMEs in central London and the south-east, including London Victoria, Euston, Croydon and Bromley.