EU-US Privacy Shield Assessments & Certifications from TRUSTe

1. EU-US Privacy Shield Assessments & Certifications for Customer and HR Data Meet stronger obligations under the new EU-US Privacy Shield framework The new EU-US Privacy Shield reflects requirements set out by the European Court of Justice in its ruling that invalidated Safe Harbor on October 6, 2015. The new arrangement necessitates that companies meet stronger obligations to protect the personal data of Europeans and stronger monitoring and enforcement by the US Department of Commerce (DOC) and Federal Trade Commission (FTC). Now more than ever, companies need guidance to ensure requirements under the new framework are met. Learn More: truste.com Companies come to TRUSTe when they’re concerned about the protection of customer and HR data in their global operations. Business teams especially want to mitigate any risks when expanding or acquiring operations in Europe requiring the collection, use and transfer of EU customer or employee data to non-EU nations. Key Benefits: Securing EU-US Privacy Shield (which replaces “US-EU Safe Harbor”) Self-Certification is a critical component of your global compliance strategy as it provides you with a mechanism for establishing “adequate” protections required for cross-border data transfer under EU laws. Accountability-on- demand to respond to any inquiries, providing searchable evidentiary support of your privacy compliance TRUSTe offers comprehensive EU-US Privacy Shield (which replaces “US-EU Safe Harbor”) Assessments to analyze and verify compliance under the EU-US Privacy Shield framework for both customer and employee data. We can also provide Certification services for companies needing additional remediation guidance and validation in preparation for EU-US Privacy Shield Self-Certification under Department of Commerce authority. Demonstrated privacy commitment to build trust with users, clients, business partners, and regulators ASSESSMENT FEATURES Our Assessments provide you with the information you need to take control with specific steps to mitigate risks. Streamlined process minimizes disruption to your daily business operations and lightens the load for your in- house team Comprehensive Assessment We first define the scope of assessment by business units, product/service lines, and digital properties (websites, apps, cloud platforms). Then determine whether to extend review to employee data or offline practices. A dedicated Privacy Solutions Manager (PSM) works with your team - leveraging the easy-to-use SaaS-based Assessment Manager platform - to efficiently guide discovery of necessary information, including relevant data flows. We then evaluate your privacy policies and practices against the EU-US Privacy Shield requirements. Flexibility to extend assessment to certification with remediation guidance and verification Findings Report Our team delivers a findings report with a gap analysis dashboard and remediation recommendations so you have the privacy risk information you need to take actionable steps. Tracker Scanning TRUSTe will apply proprietary scanning technology to the applicable digital properties providing comprehensive insight into personally identifiable information (PII) data collection, first and third party trackers on your property, and level of risk through the Privacy Sensitivity Index (PSI). Ongoing Guidance You also get access to TRUSTe privacy experts for ongoing policy guidance, along with educational webinars, events, whitepapers, client advisories, privacy tips and research. Powering Privacy Compliance and Trust CONTACT US US: 888.878.7830 www.truste.com | EU: +44 (0) 203 078 6495 www.truste.eu

2. EU-US Privacy Shield Assessments & Certifications for Customer and HR Data 2 Dispute Resolution TRUSTe provides a third–party dispute resolution service, which helps you efficiently manage privacy inquiries from customers, and addresses the dispute handling requirements of the EU-US Privacy Shield. Powered by TRUSTe Button We provide you with external demonstration to consumers, business partners and regulators that your company uses TRUSTe technology and tools to examine your privacy practices and handle privacy related questions or concerns. The Powered by TRUSTe button may be placed on your digital Privacy Policy page and links to a mechanism for consumers to submit questions or feedback. CERTIFICATION FEATURES With Assessment results in hand, you have the flexibility to choose whether to obtain additional support for your EU-US Remediation / Validation We assist with any necessary remediation steps, including providing relevant templates and process change advice. We then validate that your privacy statements accurately reflect your privacy practices and are consistent with TRUSTe standards, including EU-US Privacy Shield requirements. TRUSTe Certified Privacy Seal / Trustmark Once certified, we will authorize your use of the TRUSTe Certified privacy seal for display on your digital properties. The seal will be hosted by TRUSTe and linked to a TRUSTe Validation Page to provide verification along with an easy-to-understand consumer notice that you meet globally recognized privacy requirements, including the EU-US Privacy Shield, upon which the TRUSTe Standards are based Letter of Attestation As proof of TRUSTe Certification, an official Letter of Attestation can be shared with your business partners, providing your organization with competitive differentiation. EU-US Privacy Shield Preparation TRUSTe will assist with EU-US Privacy Shield Registration preparation and include TRUSTe as named independent Verification Agent and Dispute Resolution Provider, along with notation of membership in TRUSTe Privacy Programs. This provides your organization with a strong submission for EU-US Privacy Shield Self-Certification. # # # SOLUTIONS TO ADDRESS A WIDE RANGE OF PRIVACY CHALLENGES We provide a number of service tracks specifically designed to tackle the most important privacy challenges faced by our clients. TRUSTe EU-US Privacy Shield Assessments and Certifications are part of our broad range of privacy services. You may also be interested in our Enterprise, Asia Cross Border, or Kids Privacy services to further expand your risk and compliance management efforts. In addition, if you want to address both EU-US Privacy Shield and Model Contract Clause compliance, check out our comprehensive two-in-one EU Data Transfer Privacy Assessment Solution at “www.truste.com” ABOUT TRUSTe TRUSTe powers privacy compliance and trust by enabling businesses to use data across their customer, employee and vendor channels. We have nearly 20 years experience and a team of over 150 professionals dedicated to providing data privacy management solutions and services, including assessments, certifications and our SaaS–based Platform. The Data Privacy Management Platform provides control over all phases of privacy; from conducting assessments and implementing compliance controls to managing ongoing monitoring. Companies worldwide rely on TRUSTe to minimize compliance risk and protect their brand. Powering Privacy Compliance and Trust CONTACT US US: 888.878.7830 www.truste.com | EU: +44 (0) 203 078 6495 www.truste.eu