EU-U.S. Data Privacy Framework (EU-U.S. DPF), UK Extension to the EU-U.S. DPF, and Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Verification

Recognized EU-U.S. DPF, UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF* Verification

• Privacy-compliant data flows. Ensure compliant data mechanisms from the EU and, as applicable, the UK (and Gibraltar), and/or Switzerland to the United States as a DPF Program-verified company, ensuring no delay in business operations across your markets.
• Operationalize your data mechanisms for accountability. This includes strong privacy notices and meeting other strong privacy requirements outlined in the relevant part(s) of the DPF Program.
• Reputation & Trust. Enhance your reputation and trust with trade partners, investors, customers, and regulators compliance to an internationally recognized standard with a verified seal. Show your commitment to protecting personal data and privacy.

*Note: To participate in the UK Extension to the EU-U.S. DPF an organization must also participate in the EU-U.S. DPF, whereas it is possible to participate exclusively in either the EU-U.S. DPF or the Swiss-U.S. DPF.

Data Protection Framework Verification Packages

Prepare for EU-U.S. DPF and, as applicable, UK Extension to the EU-U.S. DPF, and/or Swiss-U.S. DPF Self-Certification

	Verification Package	Independent Recourse Mechanism
Independent Recourse Mechanism* Efficiently manages privacy inquiries from customers, and addresses the privacy-related dispute handling requirements. TRUSTe can be listed as your Independent Recourse Mechanism.	✔	✔
Privacy Feedback Button Links to a mechanism for consumers to submit questions or feedback.	✔	✔
Assessment: Customer or HR Data Evaluate your privacy policies and practices against the DPF Program requirements.	✔
Policy and Procedure Review Review of policies and procedures to demonstrate the effectiveness of control procedures	✔
Findings Report Access to gap analysis dashboard and remediation recommendations to take actionable steps.	✔
Ongoing Guidance Access to TRUSTe privacy experts for ongoing policy guidance, along with educational webinars, events, whitepapers, privacy tips	✔
DPF Program Self-Certification Guidance We provide the assistance you need to prepare for the DPF Program self-certification process.	✔
Searchable Audit Trail Central repository for you to easily search, providing you with a way to respond to inquiries and demonstrate compliance for internal / external audits.	✔
Remediation Assistance Assistance with any necessary remediation steps and validation that your privacy statements accurately reflect your privacy practices.	✔
TRUSTe Privacy Seal Use of the TRUSTe Verified Privacy seal for display on your digital properties.	✔
TRUSTe Letter of Attestation Proof that can be shared with your business partners, providing your organization with competitive differentiation.	✔
TRUSTe Third-party Verification Listing for Self-certification to the U.S. Department of Commerce Assistance with the DPF Program self-certification preparation and include TRUSTe as named independent Verification Agent and Independent Recourse Mechanism Provider.	✔
Ongoing Compliance Monitoring TRUSTe also provides ongoing compliance monitoring during the verification term.	✔

* Independent Recourse Mechanism, or essentially your Dispute Resolution (DR), for Customer inquiries can be managed by TRUSTe. DR must be provided by relevant EU data protection authority/ies (EU DPA(s)), the UK Information Commissioner’s Office (ICO) and the Gibraltar Regulatory Authority (GRA), and/ or the Swiss Federal Data Protection and Information Commissioner (FDPIC) (as applicable) for HR inquiries.

The TRUSTe Assurance Process

Strengthen your Data Privacy Compliance