Last week, EcoVadis has certified its compliance to the EU-US Privacy Shield framework and has been added to the US department of Commerce’s list of Privacy Shield participants. EcoVadis’ participation confirms that we commit to the Privacy shield principles for the transfer of European personal data to the US. Our Privacy Shield commitment covers human resources information we collect in the context of the employment relationship as well as other personal information that we collect from actual and potential customers.
The EU-U.S. Privacy Shield Framework was designed jointly by the U.S. Department of Commerce and the European Commission to provide companies on both sides of the Atlantic with a mechanism to comply with EU data protection requirements when transferring personal data from the European Union to the United States in support of transatlantic commerce.
The Privacy shield framework replaces the Safe Harbor agreement that did not meet the European data protection requirements and introduces stronger obligations on the handling of data from the EU and provides greater protection for individuals.
EcoVadis takes the protection of user information to heart. We comply with the data protection directive 95/46/EC and adheres to the set of data protection principles developed by the French Data Protection Authority CNIL (Comission Nationale de l’Ínformatique et des Libertés). EcoVadis is actively analyzing the new EU regulation 2016/679 to be ready in 2018 when it comes into force.
We are committed to maintaining effective business processes and to support them with the most demanding Security practices. Visit our Trust Center to learn more on how we ensure quality and information security in the CSR rating services that we provide.