The Entertainment ID Registry (EIDR) has been certified with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), which allows for the secure exchange of personal data between European Union countries and certified U.S. companies.
The certification ensures required data protection measures and data protection guarantees will be observed by EIDR with EU content identifiers and that EIDR will only process data for the purposes for which that data was collected.
The certification was handled by the U.S. Department of Commerce’s International Trade Administration (ITA), which works with the Federal Trade Commission, the U.S. Department of Transportation and other relevant government bodies to enforce the DPF rules.
“The EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF were developed to facilitate transatlantic commerce by providing U.S. organizations with reliable mechanisms for personal data transfers to the United States from the European Union (and) European Economic Area, the United Kingdom (and Gibraltar), and Switzerland that are consistent with EU, UK, and Swiss law,” the DPF site reads.
By participating in the DPF, EIDR agrees to:
- Include in its privacy policy a declaration of its commitment to comply with the DPF Principles, so that the commitment becomes enforceable under U.S. law.
- Include a link to the U.S. Department of Commerce’s DPF program website and a link to or the web address for the relevant website or complaint submission form of the independent recourse mechanisms that is available to investigate individual complaints brought under the DPF Principles.
- Inform individuals of their rights to access their personal data, the requirement to disclose personal information in response to lawful request by public authorities, which enforcement authority has jurisdiction over the participating organization’s compliance with the DPF Principles, and the participating organization’s liability in cases of onward transfer of data to third parties.
To read more about DPF, click here.