U.S.-Swiss Safe Harbor Privacy Principles

Onward Transfer

To disclose information to a third party, organizations must apply the Notice and Choice Principles. Where an organization wishes to transfer information to a third party that is acting as an agent, as described in the footnotes, it may do so if it first either ascertains that the third party subscribes to the Principles or is subject to FADP or another adequacy finding or enters into a written agreement with such third party requiring that the third party provide at least the same level of privacy protection as is required by the relevant Principles. If the organization complies with these requirements, it shall not be held responsible (unless the organization agrees otherwise) when a third party to which it transfers such information processes it in a way contrary to any restrictions or representations, unless the organization knew or should have known the third party would process it in such a contrary way and the organization has not taken reasonable steps to prevent or stop such processing.

Other Privacy Principles

Notice

Choice

Security

Data Integrity

Access

Enforcement

Annex