Last week, the Federal Trade Commission (FTC) reached settlements with five companies regarding allegations that they had falsely claimed to be compliant with the EU-U.S. Privacy Shield framework.
The framework allows companies to transfer data from the U.S. to the EU without running afoul of privacy laws like the General Data Protection Regulation (GDPR), but—and this is a big “but”—companies have to certify ahead of time with the Department of Commerce or potentially face the wrath of the FTC.
