[Accred-Model] Version 1.6 of the Accreditation and Access Model

[Rubens Kuhl]

> Em 19 de jun de 2018, à(s) 14:32:000, John R. Levine <johnl at iecc.com> escreveu:
> 
>> It's great when there is actually an easy solution.  At least for the many US companies, law firms, cybersecurity firms, and others (and this a huge part of the group seeking access), they should "self-certify" to the EU-US Privacy Shield, via procedures set up by the US Department of Commerce and Federal Trade Commission.
> 
> Well, at least until the EU courts kill privacy shield like they did Safe Harbor.
> 
> Banks and non-profits such as CAUCE are not eligible for Privacy Shield (they're not regulated by the FTC or DOT.)  For small organizations the PS rules are extremely conplex and there's a mandatory annual payment to cover potential arbitration costs.
> 
> Can we back up and explain what problem this overcomplex "solution" is supposed to be solving here?


Having redress mechanisms for data subjects that have their data privacy rights violated. With great power, there must also come great responsibility.



Rubens




-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 528 bytes
Desc: Message signed with OpenPGP
URL: <http://mm.icann.org/pipermail/accred-model/attachments/20180619/b6f96e78/signature.asc>