[OASIS Issue Tracker] (MQTT-434) Replace references to Safe Harbor

[ https://issues.oasis-open.org/browse/MQTT-434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Richard Coppen updated MQTT-434:
--------------------------------

    Affects Version/s: 5

> Replace references to Safe Harbor
> ---------------------------------
>
>                 Key: MQTT-434
>                 URL: https://issues.oasis-open.org/browse/MQTT-434
>             Project: OASIS Message Queuing Telemetry Transport (MQTT) TC
>          Issue Type: Bug
>          Components: core
>    Affects Versions: 5, wd13
>            Reporter: Peter Niblett
>
> We need to check all the references in 1.3 and 1.4, but I have spotted one that needs replacing (or removing). 
> The following reference appears in 1.4
>   [USEUSAFEHARB]
>   U.S.-EU Safe Harbor
>   http://export.gov/safeharbor/eu/eg_main_018365.asp
> It's used in the last paragraph of 5.1 ... "In addition to technical security issues there could also be geographic (e.g. U.S.-EU SafeHarbor [USEUSAFEHARB]), industry specific (e.g. PCI DSS [PCIDSS]) and regulatory considerations (e.g. Sarbanes-Oxley [SARBANES])".
> If you follow the link you will see it says
> On October 6, 2015, the European Court of Justice issued a judgment declaring as “invalid” the European Commission’s Decision 2000/520/EC of 26 July 2000 “on the adequacy of the protection provided by the safe harbour privacy principles and related frequently asked questions issued by the US Department of Commerce.” As a result of that decision, the U.S.-EU Safe Harbor Framework is not a valid mechanism to comply with EU data protection requirements when transferring personal data from the European Union to the United States.
> On July 12, 2016, U.S. Secretary of Commerce Penny Pritzker joined European Union Commissioner Věra Jourová to announce the approval of the EU-U.S. Privacy Shield Framework as a valid legal mechanism to comply with EU requirements when transferring personal data from the European Union to the United States. The EU-U.S. Privacy Shield Framework replaces the U.S.-EU Safe Harbor Framework. The Department began accepting certifications on August 1, 2016.



--
This message was sent by Atlassian JIRA
(v6.2.2#6258)