Galexia

The US Safe Harbor - Fact or Fiction? (2008)

5.9. Categories of data protected

It is important to note that even if an organisation is compliant with the basic Safe Harbor requirements, they may have limited the scope of their Safe Harbor membership to specific categories of data. This limitation may or may not appear in their published privacy policy, but it is usually recorded in their self-certification entry.

Of the 348 organisations who were found to be compliant in this study, only 54 extended their Safe Harbor membership to all data. Out of the 1,597 entries on the Safe Harbor list only 54 are compliant with basic Safe Harbor requirements for all categories of data.

The following table summarises the categories of data selected by the 348 compliant organisations:

Category of Data

Selected

Unique Selection[17]

Human Resources

152

41

Online

294

75

Offline

181

4

Manual

134

2

Other

6

6

 


[17] ‘Unique selection’ indicates organisations who only selected this category of data.