Web Page for Safe Harbor List

window.location = "https://www.export.gov/safehrbr/list.aspx"Web Page for Safe Harbor List

window.location = "https://www.export.gov/safehrbr/list.aspx"

SAFE HARBOR LIST

The organizations on this list have notified the Department of Commerce that they adhere to the safe harbor framework developed by the Department of Commerce in coordination with the European Commission. The safe harbor provides guidance for U.S. organizations on how to provide "adequate protection" for personal data from Europe as required by the European Union's Directive on Data Protection.

An organization's self-certification to the safe harbor list, and its appearance on this list pursuant to the self certification, constitute a representation to the Department of Commerce and the public that it adheres to a privacy policy that meets the safe harbor framework.

There are benefits to firms who join the safe harbor, but participation in the safe harbor framework and self certification to the list are entirely voluntary. An organization's absence from the list does not mean that it does not provide effective protection for personal data or that it does not qualify for the benefits of the safe harbor.

In order to keep this list current, a notification will be effective for a period of twelve months. Therefore, organizations need to notify the Department of Commerce every twelve months to reaffirm their continued adherence to the safe harbor framework.

Organizations should notify the Department of Commerce if their representation to the Department is no longer valid. Failure by an organization to so notify the Department could constitute a misrepresentation.

An organization may withdraw from the list at any time by notifying the Department of Commerce. Withdrawal from the list terminates the organization's representation of adherence to the safe harbor, but this does not relieve the organization of its safe harbor obligations with respect to personal information received during the time the organization is on the safe harbor list.

If a relevant self-regulatory or government enforcement body finds an organization has engaged in a persistent failure to comply with the principles, then the organization is no longer entitled to the benefits of the safe harbor. In this case, the organization must promptly notify the Department of Commerce of such facts either by email or letter. Failure to do so may be actionable under the False Statements Act (18 U.S.C. 1001). That organization must also provide the Department of Commerce with a copy of the decision letter from the relevant self-regulatory or government enforcement body.

In maintaining the list, the Department of Commerce does not assess and makes no representations to the adequacy of any organization's privacy policy or its adherence to that policy. Furthermore, the Department of Commerce does not guarantee the accuracy of the list and assumes no liability for the erroneous inclusion, misidentification, omission, or deletion of any organization, or any other action related to the maintenance of the list.

Search | Search By Industry Sector | Search By State

- Click on the organization's name to view its detailed safe harbor participation information.
- Click on "persistent failure to comply" to view an organization's non-compliance letter.

Organization (list is sorted alphabetically)

Certification Status

Compliance Status

Personal Data Covered

	Organization		Certification Status			Personal Data Covered
1103	Mediamark Research, Inc. c/o RoperASW	\|	Not Current	\|	\|	On-Line, Off-Line, Manually Processed Data
1104	MediaSpan Group, Inc. (formerly MediaSpan Online Services)	\|	Current	\|	\|	Personal data processed by MG is primarily collected on-line while some data, mostly provided by clients, is collected off-line. However, off-line data is only added to our databases when such data is accompanied by a valid e-mail address and opt-in permission has been given. MG's privacy policy does not cover any human resources related private information. While we do keep HR related privacy data on MOS employees, it's use and disclosure is limited by California state law. We do not have any human resource data on citizens of member countries of the EU.
1105	Medical Marketing Studies US (MMS)	\|	Current	\|	\|	On-line & Off-line
1106	MediciGroup, Inc	\|	Current	\|	\|	Off-line, on-line, manually processed
1107	Medius Corp.	\|	Not Current	\|	\|	Online, offline, manually processed data
1108	Medpace Bioanalytical Laboratories LLC	\|	Current	\|	\|	On-Line, Off-Line, Manually Processed
1109	Medpace Clinical Pharmacology LLC	\|	Current	\|	\|	On-Line, Off-Line, Manually Processed
1110	Medpace Reference Laboratories LLC	\|	Current	\|	\|	On-line, Off-line, Manually Processed
1111	Medpace, Inc.	\|	Current	\|	\|	On-Line, Off-Line, Manually Processed
1112	MedQIA	\|	Current	\|	\|	N/A (MedQIA receives de-identified data)
1113	MedTel Outcomes, LLC	\|	Not Current	\|	\|	off-line, on-line, manually processed da
1114	Meggitt-USA, Inc./The Whittaker Corporation	\|	Current	\|	\|	Off&on-line, man. proc, human resources
1115	mEgo Inc	\|	Current	\|	\|	OFF-LINE, ON-LINE, MANUALLY PROCESSED DA
1116	Merck & Co, Inc.	\|	Current	\|	\|	On-Line, Off-Line, Manually Processed, Human Resources
1117	Mercury International	\|	Not Current	\|	\|	On-Line, Off-Line, and Manually Processed Data
1118	Meridian Discovery, LLC	\|	Current	\|	\|	Off-Line, On-Line, Manual
1119	Merkle, Inc.	\|	Current	\|	\|	on-line and off-line (backup) data
1120	Merlin Telecom USA LLC	\|	Not Current	\|	\|	off-line, on-line, manually processed da
1121	MessageLabs, Inc.	\|	Not Current	\|	\|	off-line, on-line, human resources data
1122	MessageWay Solutions, Inc	\|	Current	\|	\|	On-line and off-line.
1123	Metastorm Inc.	\|	Current	\|	\|	Human Resources Data.
1124	MetiLinx, Inc.	\|	Not Current	\|	\|	On-Line, Off-Line, Manually Processed
1125	Metropolitan Direct Marketing	\|	Not Current	\|	\|	Offline
1126	Mi8 Corporation	\|	Not Current	\|	\|	On-Line
1127	Michael G. Wilson and Co., Inc.	\|	Current	\|	\|	Off-line
1128	MicroEdge, Inc	\|	Current	\|	\|	Off-line, On-line, Manual, HR
1129	MicroMass Communications, Inc.	\|	Current	\|	\|	On-Line, Off-Line, Manually Processed
1130	Micron Technology, Inc.	\|	Current	\|	\|	off-line, on-line, man proc, hr data
1131	Microsoft Corporation and its Controlled U.S. Subsidiaries	\|	Current	\|	\|	On-Line, Off-Line, Manually Processed, Human Resources Data.
1132	Millward Brown Group, Inc.	\|	Current	\|	\|	Online, off-line, manually-processes, HR

Previous More