--- type: "firecrawl-provider" description: "U.S. Department of Commerce Data Privacy Framework (DPF) program: search the public list of self-certified participants (EU-U.S. DPF, UK Extension, Swiss-U.S. DPF), filter by status, state, framework, data covered, industry, recourse mechanism and verification method, read one organization's full certification record, and look up the reference lists behind the filters. Read-only, anonymous, from the site's own JSON API." use_when: "U.S. Department of Commerce Data Privacy Framework (DPF) program: search the public list of self-certified participants (EU-U.S. DPF, UK Extension, Swiss-U.S. DPF), filter by status, state, framework, data covered, industry, recourse mechanism and verification method, read one organization's full certification record, and look up the reference lists behind the filters. Read-only, anonymous, from the site's own JSON API." categories: "Public records" capabilities: 4 credits_per_call: 5 --- # Data Privacy Framework participant list on Firecrawl Alexandria U.S. Department of Commerce Data Privacy Framework (DPF) program: search the public list of self-certified participants (EU-U.S. DPF, UK Extension, Swiss-U.S. DPF), filter by status, state, framework, data covered, industry, recourse mechanism and verification method, read one organization's full certification record, and look up the reference lists behind the filters. Read-only, anonymous, from the site's own JSON API. - Categories: Public records - Category index: [Public records category](https://firecrawl.dev/alexandria/agents/categories/public-records) - Provider key: `dataprivacyframework-gov` - Access: Firecrawl credits - Cost: 5 credits per call ## More - [Human guide](https://firecrawl.dev/app/alexandria/dataprivacyframework-gov) - [OpenAPI spec](https://firecrawl.dev/alexandria/agents/providers/dataprivacyframework-gov/openapi.json) ## Capabilities - [Get participant](https://firecrawl.dev/alexandria/agents/providers/dataprivacyframework-gov/companies/get_participant): The full public DPF record of one organization: legal and display name, size and revenue bands, address, verification method, stated purpose of data processing, industries, every framework certification with status, dates, recourse mechanisms and inactive periods, the privacy policies on file and the covered entities. Named contact persons are returned only when include_contacts is true. - [List reference data](https://firecrawl.dev/alexandria/agents/providers/dataprivacyframework-gov/companies/list_reference_data): The reference lists behind the participant filters: the three frameworks, the recourse mechanisms (independent dispute resolution providers, verification providers and U.S. statutory bodies) with their websites and the data types they handle, or the industry taxonomy (name / sector / sub-sector rows with the ids search_participants takes). Industries can be narrowed client-side with `query`. - [Search participants](https://firecrawl.dev/alexandria/agents/providers/dataprivacyframework-gov/companies/search_participants): One page of the public DPF participant list. Filter by display-name text, participation status (active, inactive or all), first letter, U.S. state, framework, data covered (HR / non-HR), industry ids, recourse mechanism names, statutory body and verification method. Each row carries the organization id, city/state, the per-framework certification status and the covered entities. - [Search site content](https://firecrawl.dev/alexandria/agents/providers/dataprivacyframework-gov/companies/search_site_content): Full-text search over the DPF program's published guidance pages (FAQs, how-to-join articles, program requirements). Returns titles, highlighted snippets and the page URLs. This searches site content, not the participant list. ## 1. Choose this provider when U.S. Department of Commerce Data Privacy Framework (DPF) program: search the public list of self-certified participants (EU-U.S. DPF, UK Extension, Swiss-U.S. DPF), filter by status, state, framework, data covered, industry, recourse mechanism and verification method, read one organization's full certification record, and look up the reference lists behind the filters. Read-only, anonymous, from the site's own JSON API. ## 2. Minimal request Call `POST https://api.firecrawl.dev/v2/scrape` with `{ alexandria: { provider, capability, options } }`. For a batch, send `{ alexandria: [...] }` with up to 10 calls. ```json { "provider": "dataprivacyframework-gov", "capability": "companies/get_participant", "options": { "organization_id": 6474 } } ``` ## 3. Add provider options Use only the options needed for the task: - `include_contacts` (boolean): Also return the organization's published DPF contact persons (name, title, role, email, phone). Example: `false` - `organization_id` (number): The site's numeric organization id (search_participants `organization_id`, the number in /participant/{id}). Example: `10` - `url` (string): A participant page URL; alternative to organization_id. Pattern: ^https?://(www\.)?dataprivacyframework\.gov/participant/[0-9]+. Example: `` ## 4. Request through your preferred interface ### JavaScript ```javascript const result = await firecrawl.scrape({ alexandria: { provider: "dataprivacyframework-gov", capability: "companies/get_participant", options: { organization_id: 6474, }, }, }); ``` ### Python ```python result = firecrawl.scrape_alexandria({ "provider": "dataprivacyframework-gov", "capability": "companies/get_participant", "options": { "organization_id": 6474 } }) ``` ### cURL ```sh curl https://api.firecrawl.dev/v2/scrape \ -H "Authorization: Bearer $FIRECRAWL_API_KEY" \ -H "Content-Type: application/json" \ -d '{ "alexandria": { "provider": "dataprivacyframework-gov", "capability": "companies/get_participant", "options": { "organization_id": 6474 } } }' ``` ### CLI ```sh firecrawl scrape 'dataprivacyframework-gov/companies/get_participant' \ --options '{"organization_id":6474}' ``` ### MCP Call the FCX MCP retrieve tool with this object: ```json { "provider": "dataprivacyframework-gov", "capability": "companies/get_participant", "options": { "organization_id": 6474 } } ``` Ask for only the returned fields needed by the task. ## 5. Full request shape ```json { "provider": "dataprivacyframework-gov", "capability": "companies/get_participant", "options": { "organization_id": 6474 } } ``` ## 6. Response data The response includes `success`, `provider`, `capability`, `creditsCost` and `data`. This example shows the provider payload in `data`: ```json { "address": { "city": "Redmond", "country": null, "postal_code": "98052", "state": "WA", "street": "1 Microsoft Way" }, "annual_revenue": "Over $5 billion", "certifications": [ { "framework_id": 1, "hr_data": true, "inactive_periods": [], "install_date": "2016-08-12T12:00:00+00:00", "name": "EU-US Certification", "non_hr_data": true, "recourse_mechanisms": [ { "hr": true, "name": "EU Data Protection Authorities (DPAs)", "non_hr": false, "type": "Dispute Resolution Provider", "website": "https://edpb.europa.eu/about-edpb/board/members_en" }, { "hr": false, "name": "EU Data Protection Authorities (DPAs)", "non_hr": true, "type": "Dispute Resolution Provider", "website": "https://edpb.europa.eu/about-edpb/board/members_en" }, { "hr": false, "name": "Swiss Federal Data Protection and Information Commissioner (FDPIC)", "non_hr": true, "type": "Dispute Resolution Provider", "website": "https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt/kontaktformular_uebrige.html" }, { "hr": false, "name": "Federal Trade Commission", "non_hr": false, "type": "U.S. Statutory Body", "website": "https://www.ftc.gov" } ], "status": "Active - Re-certification under Review", "usage_end_date": "2027-08-31T12:00:00+00:00" }, { "framework_id": 2, "hr_data": true, "inactive_periods": [], "install_date": "2017-05-05T12:00:00+00:00", "name": "SW-US Certification", "non_hr_data": true, "recourse_mechanisms": [ { "hr": true, "name": "Swiss Federal Data Protection and Information Commissioner (FDPIC)", "non_hr": false, "type": "Dispute Resolution Provider", "website": "https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt/kontaktformular_uebrige.html" }, { "hr": false, "name": "Swiss Federal Data Protection and Information Commissioner (FDPIC)", "non_hr": true, "type": "Dispute Resolution Provider", "website": "https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt/kontaktformular_uebrige.html" }, { "hr": false, "name": "Federal Trade Commission", "non_hr": false, "type": "U.S. Statutory Body", "website": "https://www.ftc.gov" } ], "status": "Active - Re-certification under Review", "usage_end_date": "2027-08-31T12:00:00+00:00" }, { "framework_id": 3, "hr_data": true, "inactive_periods": [], "install_date": "2023-08-10T12:00:00+00:00", "name": "UK Extension Certification", "non_hr_data": true, "recourse_mechanisms": [ { "hr": false, "name": "Swiss Federal Data Protection and Information Commissioner (FDPIC)", "non_hr": true, "type": "Dispute Resolution Provider", "website": "https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt/kontaktformular_uebrige.html" }, { "hr": true, "name": "UK Information Commissioner’s Office (ICO)", "non_hr": false, "type": "Dispute Resolution Provider", "website": "https://ico.org.uk/make-a-complaint/uk-extension-to-the-eu-us-data-privacy-framework-complaints-tool/" }, { "hr": false, "name": "UK Information Commissioner’s Office (ICO)", "non_hr": true, "type": "Dispute Resolution Provider", "website": "https://ico.org.uk/make-a-complaint/uk-extension-to-the-eu-us-data-privacy-framework-complaints-tool/" }, { "hr": false, "name": "Federal Trade Commission", "non_hr": false, "type": "U.S. Statutory Body", "website": "https://www.ftc.gov" } ], "status": "Active - Re-certification under Review", "usage_end_date": "2027-08-31T12:00:00+00:00" } ], "covered_entities": [ "Obsidian Entertainment, Inc.", "Affirmed Networks, Inc.", "Skype Communications US Corporation", "Citus Data, Inc.", "Nuance Communications, Inc.", "ClipChamp LLC", "Vexcel Corporation", "InXile Entertainment, Inc.", "MOL Corporation", "Affirmed Networks Communications Technologies Inc." ], "display_name": "Microsoft Corporation", "industries": [ { "name": "Information and Communications Technology", "sector": "Software", "sub_sector": null } ], "legal_name": "Microsoft Corporation", "number_of_employees": "501 or more", "observed_at_ms": 1791008537980, "organization_id": 6474, "privacy_policies": [ { "description": "The Microsoft Privacy Statement explains the personal data Microsoft processes, how Microsoft processes it, and for what purposes. For a description of our participation in Data Privacy Framework, please expand the “Storage and processing of personal data” section at https://go.microsoft.com/fwlink/?linkid=854603", "documents": [], "effective_date": "2023-08-23T12:00:00+00:00", "external_url": "https://www.microsoft.com/en-us/privacy/privacystatement", "is_current": true, "name": "Microsoft Privacy Statement", "type": "Non-HR" }, { "description": "The Microsoft Data Privacy Notice describes the collection and use of personal employment data of employees, external staff, candidates and guests. The Notice is available to employees on Microsoft internal and publicly viewable websites, systems, tools and applications used by employees, external staff, candidates, and guests to enter, edit or view their personal data. For description of Data Privacy Framework, please see the section \"Where we store and process personal data”: https://go.microsoft.com/fwlink/?Linkid=518021", "documents": [], "effective_date": "2023-09-14T12:00:00+00:00", "external_url": "https://www.microsoft.com/en-US/privacy/data-privacy-notice", "is_current": true, "name": "Microsoft Data Privacy Notice", "type": "HR" } ], "purpose": "Microsoft collects data from Microsoft product users and employees, external staff, candidates and guests through interactions with them and through their interactions with Microsoft products, in accordance with the Microsoft Privacy Statement (for Microsoft product users) and the Microsoft Global Data Privacy Notice for Employees, External Staff, Candidates and Guests. The personal data we process related to product users is provided by data subjects directly, and we get some of it by collecting data about interactions, use, and experiences with our products. The data we collect depends on the context of interactions with Microsoft and the choices users make, including privacy settings and the products and features used. We also obtain data about users from third parties. Microsoft uses the data we collect to provide rich, interactive experiences. In particular, we use data to provide our products, which includes updating, securing, and troubleshooting, as well as providing support.\r\n \r\nMicrosoft processes data to improve and develop our products, personalize our products and make recommendations, and advertise and market to users, which includes sending promotional communications, targeting advertising, and presenting relevant offers. We also use the data to operate our business, which includes analyzing our performance, meeting our legal obligations, developing our workforce and doing research. The personal data Microsoft processes related to employees, external staff, candidates and guests is processed to administer the employment contract, offer letter or other commitments we have made to the individual, and for other overriding and legitimate business purposes, legally required purposes, and other uses where permissible and in accordance with applicable laws and consultation requirements, as further detailed in the Microsoft Global Data Privacy Notice for Employees, External Staff, Candidates and Guests.\r\n \r\nMicrosoft data processing also includes sharing data, when it is required to provide the service or carry out the transactions requested. We share personal data with consent or to complete any transaction or provide any product data subjects have requested or authorized. We also share data with Microsoft-controlled affiliates and subsidiaries; with vendors working on our behalf; when required by law or to respond to legal process; to protect our customers; to protect lives; to maintain the security of our products; and to protect the rights and property of Microsoft and its customers. All U.S. subsidiaries using the Microsoft brand name are covered entities, as well as those subsidiaries listed above, which use different names. Certain Microsoft U.S. entities continue to maintain their own DPF certification, including LinkedIn Corporation and GitHub.", "source_url": "https://www.dataprivacyframework.gov/participant/6474", "verification_method": "Self-Assessment" } ``` ## API reference-derived contract The following capability contract is generated from the same normalized Alexandria API reference exposed in the API spec. ### Get participant - Capability: `companies/get_participant` - Description: The full public DPF record of one organization: legal and display name, size and revenue bands, address, verification method, stated purpose of data processing, industries, every framework certification with status, dates, recourse mechanisms and inactive periods, the privacy policies on file and the covered entities. Named contact persons are returned only when include_contacts is true. - Instructions: After search_participants, with the organization_id of a row (or the pasted https://www.dataprivacyframework.gov/participant/{id} URL), for the certification record itself. - Cost: 5 credits per call - Capability file: [Get participant](https://firecrawl.dev/alexandria/agents/providers/dataprivacyframework-gov/companies/get_participant) Accepted options: - `include_contacts` (boolean): Also return the organization's published DPF contact persons (name, title, role, email, phone). Example: `false` - `organization_id` (number): The site's numeric organization id (search_participants `organization_id`, the number in /participant/{id}). Example: `10` - `url` (string): A participant page URL; alternative to organization_id. Pattern: ^https?://(www\.)?dataprivacyframework\.gov/participant/[0-9]+. Example: `` Response schema example: ```json { "address": { "city": "Redmond", "country": null, "postal_code": "98052", "state": "WA", "street": "1 Microsoft Way" }, "annual_revenue": "Over $5 billion", "certifications": [ { "framework_id": 1, "hr_data": true, "inactive_periods": [], "install_date": "2016-08-12T12:00:00+00:00", "name": "EU-US Certification", "non_hr_data": true, "recourse_mechanisms": [ { "hr": true, "name": "EU Data Protection Authorities (DPAs)", "non_hr": false, "type": "Dispute Resolution Provider", "website": "https://edpb.europa.eu/about-edpb/board/members_en" }, { "hr": false, "name": "EU Data Protection Authorities (DPAs)", "non_hr": true, "type": "Dispute Resolution Provider", "website": "https://edpb.europa.eu/about-edpb/board/members_en" }, { "hr": false, "name": "Swiss Federal Data Protection and Information Commissioner (FDPIC)", "non_hr": true, "type": "Dispute Resolution Provider", "website": "https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt/kontaktformular_uebrige.html" }, { "hr": false, "name": "Federal Trade Commission", "non_hr": false, "type": "U.S. Statutory Body", "website": "https://www.ftc.gov" } ], "status": "Active - Re-certification under Review", "usage_end_date": "2027-08-31T12:00:00+00:00" }, { "framework_id": 2, "hr_data": true, "inactive_periods": [], "install_date": "2017-05-05T12:00:00+00:00", "name": "SW-US Certification", "non_hr_data": true, "recourse_mechanisms": [ { "hr": true, "name": "Swiss Federal Data Protection and Information Commissioner (FDPIC)", "non_hr": false, "type": "Dispute Resolution Provider", "website": "https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt/kontaktformular_uebrige.html" }, { "hr": false, "name": "Swiss Federal Data Protection and Information Commissioner (FDPIC)", "non_hr": true, "type": "Dispute Resolution Provider", "website": "https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt/kontaktformular_uebrige.html" }, { "hr": false, "name": "Federal Trade Commission", "non_hr": false, "type": "U.S. Statutory Body", "website": "https://www.ftc.gov" } ], "status": "Active - Re-certification under Review", "usage_end_date": "2027-08-31T12:00:00+00:00" }, { "framework_id": 3, "hr_data": true, "inactive_periods": [], "install_date": "2023-08-10T12:00:00+00:00", "name": "UK Extension Certification", "non_hr_data": true, "recourse_mechanisms": [ { "hr": false, "name": "Swiss Federal Data Protection and Information Commissioner (FDPIC)", "non_hr": true, "type": "Dispute Resolution Provider", "website": "https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt/kontaktformular_uebrige.html" }, { "hr": true, "name": "UK Information Commissioner’s Office (ICO)", "non_hr": false, "type": "Dispute Resolution Provider", "website": "https://ico.org.uk/make-a-complaint/uk-extension-to-the-eu-us-data-privacy-framework-complaints-tool/" }, { "hr": false, "name": "UK Information Commissioner’s Office (ICO)", "non_hr": true, "type": "Dispute Resolution Provider", "website": "https://ico.org.uk/make-a-complaint/uk-extension-to-the-eu-us-data-privacy-framework-complaints-tool/" }, { "hr": false, "name": "Federal Trade Commission", "non_hr": false, "type": "U.S. Statutory Body", "website": "https://www.ftc.gov" } ], "status": "Active - Re-certification under Review", "usage_end_date": "2027-08-31T12:00:00+00:00" } ], "covered_entities": [ "Obsidian Entertainment, Inc.", "Affirmed Networks, Inc.", "Skype Communications US Corporation", "Citus Data, Inc.", "Nuance Communications, Inc.", "ClipChamp LLC", "Vexcel Corporation", "InXile Entertainment, Inc.", "MOL Corporation", "Affirmed Networks Communications Technologies Inc." ], "display_name": "Microsoft Corporation", "industries": [ { "name": "Information and Communications Technology", "sector": "Software", "sub_sector": null } ], "legal_name": "Microsoft Corporation", "number_of_employees": "501 or more", "observed_at_ms": 1791008537980, "organization_id": 6474, "privacy_policies": [ { "description": "The Microsoft Privacy Statement explains the personal data Microsoft processes, how Microsoft processes it, and for what purposes. For a description of our participation in Data Privacy Framework, please expand the “Storage and processing of personal data” section at https://go.microsoft.com/fwlink/?linkid=854603", "documents": [], "effective_date": "2023-08-23T12:00:00+00:00", "external_url": "https://www.microsoft.com/en-us/privacy/privacystatement", "is_current": true, "name": "Microsoft Privacy Statement", "type": "Non-HR" }, { "description": "The Microsoft Data Privacy Notice describes the collection and use of personal employment data of employees, external staff, candidates and guests. The Notice is available to employees on Microsoft internal and publicly viewable websites, systems, tools and applications used by employees, external staff, candidates, and guests to enter, edit or view their personal data. For description of Data Privacy Framework, please see the section \"Where we store and process personal data”: https://go.microsoft.com/fwlink/?Linkid=518021", "documents": [], "effective_date": "2023-09-14T12:00:00+00:00", "external_url": "https://www.microsoft.com/en-US/privacy/data-privacy-notice", "is_current": true, "name": "Microsoft Data Privacy Notice", "type": "HR" } ], "purpose": "Microsoft collects data from Microsoft product users and employees, external staff, candidates and guests through interactions with them and through their interactions with Microsoft products, in accordance with the Microsoft Privacy Statement (for Microsoft product users) and the Microsoft Global Data Privacy Notice for Employees, External Staff, Candidates and Guests. The personal data we process related to product users is provided by data subjects directly, and we get some of it by collecting data about interactions, use, and experiences with our products. The data we collect depends on the context of interactions with Microsoft and the choices users make, including privacy settings and the products and features used. We also obtain data about users from third parties. Microsoft uses the data we collect to provide rich, interactive experiences. In particular, we use data to provide our products, which includes updating, securing, and troubleshooting, as well as providing support.\r\n \r\nMicrosoft processes data to improve and develop our products, personalize our products and make recommendations, and advertise and market to users, which includes sending promotional communications, targeting advertising, and presenting relevant offers. We also use the data to operate our business, which includes analyzing our performance, meeting our legal obligations, developing our workforce and doing research. The personal data Microsoft processes related to employees, external staff, candidates and guests is processed to administer the employment contract, offer letter or other commitments we have made to the individual, and for other overriding and legitimate business purposes, legally required purposes, and other uses where permissible and in accordance with applicable laws and consultation requirements, as further detailed in the Microsoft Global Data Privacy Notice for Employees, External Staff, Candidates and Guests.\r\n \r\nMicrosoft data processing also includes sharing data, when it is required to provide the service or carry out the transactions requested. We share personal data with consent or to complete any transaction or provide any product data subjects have requested or authorized. We also share data with Microsoft-controlled affiliates and subsidiaries; with vendors working on our behalf; when required by law or to respond to legal process; to protect our customers; to protect lives; to maintain the security of our products; and to protect the rights and property of Microsoft and its customers. All U.S. subsidiaries using the Microsoft brand name are covered entities, as well as those subsidiaries listed above, which use different names. Certain Microsoft U.S. entities continue to maintain their own DPF certification, including LinkedIn Corporation and GitHub.", "source_url": "https://www.dataprivacyframework.gov/participant/6474", "verification_method": "Self-Assessment" } ``` ### List reference data - Capability: `companies/list_reference_data` - Description: The reference lists behind the participant filters: the three frameworks, the recourse mechanisms (independent dispute resolution providers, verification providers and U.S. statutory bodies) with their websites and the data types they handle, or the industry taxonomy (name / sector / sub-sector rows with the ids search_participants takes). Industries can be narrowed client-side with `query`. - Instructions: To turn an industry name into industry_ids or to see the exact recourse mechanism names before calling search_participants. - Cost: 5 credits per call - Capability file: [List reference data](https://firecrawl.dev/alexandria/agents/providers/dataprivacyframework-gov/companies/list_reference_data) Accepted options: - `kind` (string, required): kind Example: `frameworks` - `query` (string): Case-insensitive substring applied after download to name, sector, sub_sector and type. Mostly useful for the 589-row industry list. Example: `` Response schema example: ```json { "count": 17, "items": [ { "framework_id": null, "id": 1, "is_active": true, "name": "ANA DPF Dispute Resolution", "resolves_hr_data": false, "resolves_non_hr_data": true, "type": "Dispute Resolution Provider", "website": "https://ana.net/dpf-consumers" }, { "framework_id": null, "id": 2, "is_active": true, "name": "BBB National Programs DPF Services", "resolves_hr_data": false, "resolves_non_hr_data": true, "type": "Dispute Resolution Provider", "website": "https://bbbprograms.org/programs/all-programs/dpf-consumers" }, { "framework_id": 1, "id": 3, "is_active": true, "name": "EU Data Protection Authorities (DPAs)", "resolves_hr_data": true, "resolves_non_hr_data": true, "type": "Dispute Resolution Provider", "website": "https://edpb.europa.eu/about-edpb/board/members_en" }, { "framework_id": null, "id": 4, "is_active": true, "name": "Federal Trade Commission", "resolves_hr_data": false, "resolves_non_hr_data": false, "type": "U.S. Statutory Body", "website": "https://www.ftc.gov" }, { "framework_id": null, "id": 5, "is_active": true, "name": "ICDR-AAA DPF IRM Service", "resolves_hr_data": false, "resolves_non_hr_data": true, "type": "Dispute Resolution Provider", "website": "https://go.adr.org/dpf_irm.html" }, { "framework_id": null, "id": 6, "is_active": true, "name": "Insights Association DPF Services Program", "resolves_hr_data": false, "resolves_non_hr_data": true, "type": "Dispute Resolution Provider", "website": "https://www.insightsassociation.org/Resources/Data-Privacy-Framework" }, { "framework_id": null, "id": 7, "is_active": true, "name": "JAMS", "resolves_hr_data": false, "resolves_non_hr_data": true, "type": "Dispute Resolution Provider", "website": "https://www.jamsadr.com/DPF-Dispute-Resolution" }, { "framework_id": null, "id": 9, "is_active": true, "name": "PrivacyTrust DPF Services", "resolves_hr_data": false, "resolves_non_hr_data": true, "type": "Dispute Resolution Provider", "website": "https://privacytrust.com/services/data-privacy-framework/dispute-resolution/" }, { "framework_id": null, "id": 10, "is_active": true, "name": "PrivacyTrust DPF Services", "resolves_hr_data": false, "resolves_non_hr_data": false, "type": "Verification Provider", "website": "https://privacytrust.com/services/data-privacy-framework/" }, { "framework_id": 2, "id": 11, "is_active": true, "name": "Swiss Federal Data Protection and Information Commissioner (FDPIC)", "resolves_hr_data": true, "resolves_non_hr_data": true, "type": "Dispute Resolution Provider", "website": "https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt/kontaktformular_uebrige.html" }, { "framework_id": null, "id": 12, "is_active": true, "name": "TRUSTe Data Privacy Framework Verification", "resolves_hr_data": false, "resolves_non_hr_data": false, "type": "Verification Provider", "website": "https://www.trustarc.com/truste-certifications/data-privacy-framework" }, { "framework_id": null, "id": 13, "is_active": true, "name": "TRUSTe Dispute Resolution", "resolves_hr_data": false, "resolves_non_hr_data": true, "type": "Dispute Resolution Provider", "website": "https://trustarc.com/dispute-resolution/" }, { "framework_id": null, "id": 14, "is_active": true, "name": "U.S. Department of Transportation", "resolves_hr_data": false, "resolves_non_hr_data": false, "type": "U.S. Statutory Body", "website": "https://www.transportation.gov/" }, { "framework_id": 3, "id": 15, "is_active": true, "name": "UK Information Commissioner’s Office (ICO)", "resolves_hr_data": true, "resolves_non_hr_data": true, "type": "Dispute Resolution Provider", "website": "https://ico.org.uk/make-a-complaint/uk-extension-to-the-eu-us-data-privacy-framework-complaints-tool/" }, { "framework_id": null, "id": 16, "is_active": true, "name": "VeraSafe DPF Dispute Resolution Program", "resolves_hr_data": false, "resolves_non_hr_data": true, "type": "Dispute Resolution Provider", "website": "https://verasafe.com/privacy-solutions/data-privacy-framework-dispute-resolution-program/" }, { "framework_id": null, "id": 17, "is_active": true, "name": "VeraSafe DPF Verification and Certification Program", "resolves_hr_data": false, "resolves_non_hr_data": false, "type": "Verification Provider", "website": "https://verasafe.com/privacy-solutions/data-privacy-framework-verification-program/" }, { "framework_id": null, "id": 18, "is_active": true, "name": "BBB National Programs DPF Services", "resolves_hr_data": false, "resolves_non_hr_data": false, "type": "Verification Provider", "website": "https://bbbprograms.org/programs/privacy/dpf" } ], "kind": "recourse_mechanisms", "observed_at_ms": 1791008553293, "query": null, "source_url": "https://dpfapi.azurewebsites.net/api/thirdparty" } ``` ### Search participants - Capability: `companies/search_participants` - Description: One page of the public DPF participant list. Filter by display-name text, participation status (active, inactive or all), first letter, U.S. state, framework, data covered (HR / non-HR), industry ids, recourse mechanism names, statutory body and verification method. Each row carries the organization id, city/state, the per-framework certification status and the covered entities. - Instructions: Start here to find an organization_id and its current status per framework; use get_participant for the full certification record. Filter values for industry_ids and recourse_mechanisms come from list_reference_data. - Cost: 5 credits per call - Capability file: [Search participants](https://firecrawl.dev/alexandria/agents/providers/dataprivacyframework-gov/companies/search_participants) Accepted options: - `data_covered` (string[]): Restrict to certifications covering human-resources data (`HR`) and/or non-HR data (`NonHR`). The site accepts other strings silently, so only these two are allowed. Example: `[]` - `frameworks` (number[]): Framework ids: 1 = EU-U.S. DPF, 2 = Swiss-U.S. DPF, 3 = UK Extension to the EU-U.S. DPF. Example: `[]` - `industry_ids` (number[]): Industry row ids from list_reference_data(kind=industries). Several ids share one industry name; pass every id you want to match. Example: `[]` - `page` (number): 1-based page number; `next_page` of the previous result. Example: `1` - `page_size` (number): Rows per page; the three sizes the site's own list offers. Example: `50` - `query` (string): Text matched against the organization's public display name (substring, case-insensitive on the site). Omit for the full list. Example: `` - `recourse_mechanisms` (string[]): Recourse mechanism provider names exactly as listed by list_reference_data(kind=recourse_mechanisms), e.g. `JAMS`. Example: `[]` - `start_letter` (string): Only organizations whose display name starts with this letter or digit. Pattern: ^[A-Za-z0-9]$. Example: `` - `states` (string[]): Two-letter U.S. state or territory codes (e.g. CA, NY, DC, PR). Example: `[]` - `status` (string): Participation status bucket: `active` (includes 'Active - Re-certification under Review'), `inactive` (lapsed or withdrawn), or `all`. Example: `active` - `statutory_bodies` (string[]): The U.S. statutory body with jurisdiction over the participant. Example: `[]` - `verification_method` (string): How the organization verified its compliance. Example: `Self-Assessment` Response schema example: ```json { "has_more": false, "next_page": null, "observed_at_ms": 1791008522448, "page": 1, "page_size": 50, "participants": [ { "certifications": { "eu_us": { "framework_id": 1, "hr_data": true, "name": "EU-US Certification", "non_hr_data": true, "status": "Active - Re-certification under Review" }, "swiss_us": { "framework_id": 2, "hr_data": true, "name": "SW-US Certification", "non_hr_data": true, "status": "Active - Re-certification under Review" }, "uk_extension": { "framework_id": 3, "hr_data": true, "name": "UK Extension Certification", "non_hr_data": true, "status": "Active - Re-certification under Review" } }, "city": "Redmond", "covered_entities": [ "Obsidian Entertainment, Inc.", "Affirmed Networks, Inc.", "Skype Communications US Corporation", "Citus Data, Inc.", "Nuance Communications, Inc.", "ClipChamp LLC", "Vexcel Corporation", "InXile Entertainment, Inc.", "MOL Corporation", "Affirmed Networks Communications Technologies Inc." ], "name": "Microsoft Corporation", "organization_id": 6474, "source_url": "https://www.dataprivacyframework.gov/participant/6474", "state": "WA" } ], "query": "Microsoft", "source_url": "https://www.dataprivacyframework.gov/list", "status": "active", "status_total": 3684, "total_records": 1 } ``` ### Search site content - Capability: `companies/search_site_content` - Description: Full-text search over the DPF program's published guidance pages (FAQs, how-to-join articles, program requirements). Returns titles, highlighted snippets and the page URLs. This searches site content, not the participant list. - Instructions: For questions about the program's rules and procedures rather than about a specific participant. - Cost: 5 credits per call - Capability file: [Search site content](https://firecrawl.dev/alexandria/agents/providers/dataprivacyframework-gov/companies/search_site_content) Accepted options: - `query` (string, required): query Example: `` Response schema example: ```json { "count": 50, "observed_at_ms": 1791008578186, "query": "privacy", "results": [ { "last_modified": null, "section": "Program", "summary": "Q1: What organizations that operate in the healthcare sector are eligible to join the Data Privacy Framework (DPF) program? Only U.S. organizations (including U.S. subsidiaries of", "title": "FAQs – Healthcare-Organizations", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/Healthcare-Organizations-FAQs.aspx" }, { "last_modified": null, "section": "Program", "summary": "Q1: When would European data protection authorities be selected as the independent dispute resolution body for European HR data? European HR data transferred for use in the", "title": "FAQs – Human-Resources-Data", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/Human-Resources-Data-FAQs.aspx" }, { "last_modified": null, "section": "Program", "summary": "Information Required for Data Privacy Framework (DPF) Self-Certification To expedite the self-certification process, please compile the following information before you log in via", "title": "Self-Certification-Information", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/Self-Certification-Information.aspx" }, { "last_modified": null, "section": "Program", "summary": "Q6: Is there a DPF program symbol that my organization can use to indicate its participation in the DPF Program once its self-certification has been finalized? No such a symbol is", "title": "FAQs – Privacy-Policy-(6–10)", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/Privacy-Policy-FAQs-6-10.aspx" }, { "last_modified": null, "section": "Program", "summary": "3. Ensure That Your Organization Has in Place An Appropriate Independent Recourse Mechanism For Each Type of Personal Data Covered by Its Self-Certification: Under the Recourse,", "title": "How-to-Join-the-Data-Privacy-Framework-(DPF)-Program-(part–2)", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/How-to-Join-Privacy-Shield-part-2.aspx" }, { "last_modified": null, "section": "Program", "summary": "Guide to Self-Certification The decision by a U.S.-based organization to join the Data Privacy Framework (DPF) program is entirely voluntary. However, once an eligible U.S.-based", "title": "How-to-Join-the-Data-Privacy-Framework-(DPF)-Program-(part–1)", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/How-to-Join-Privacy-Shield-part-1.aspx" }, { "last_modified": null, "section": "Program", "summary": "Organizations participating in the DPF program are required to annually re-certify to the U.S. Department of Commerce’s International Trade Administration (ITA). The ITA will remove", "title": "How-to-Re-certify-under-the-Data-Privacy-Framework-(DPF)-Program", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/How-to-Re-certify-to-Privacy-Shield.aspx" }, { "last_modified": null, "section": "Program", "summary": "Withdrawal under the Data Privacy Framework (DPF) Program If your organization wishes to withdraw from part(s) of the DPF program (i.e., the EU-U.S. Data Privacy Framework (EU-U.S", "title": "Withdrawal-under-the-Data-Privacy-Framework-(DPF)-Program", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/Withdrawal-from-Privacy-Shield.aspx" }, { "last_modified": null, "section": "Program", "summary": "Find answers to the following categories of frequently asked questions (FAQs): FAQs – General FAQs – Privacy Policy FAQs – EU-U.S. Data Privacy Framework (EU-U.S. DPF) FAQs – UK", "title": "Frequently-Asked-Questions", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/FAQs.aspx" }, { "last_modified": null, "section": "Program", "summary": "Q1: Are financial services companies eligible to join the Data Privacy Framework (DPF) program? Only U.S. organizations that are subject to the jurisdiction of the Federal Trade", "title": "FAQs – Financial-Services-Companies", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/Financial-Services-Companies-FAQs.aspx" }, { "last_modified": null, "section": null, "summary": "INTERNATIONAL TRADE ADMINISTRATION ENDORSEMENT DISCLAIMER POLICY Links to Web sites outside the U.S. Federal Government or the use of trade, firm, or corporation names within the", "title": "Disclaimer", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/Disclaimer.aspx" }, { "last_modified": null, "section": null, "summary": "PRIVACY PROGRAM ITA is committed to safeguarding personal privacy. Individual trust in the privacy and security of personally identifiable information is a foundation of trust in", "title": "Privacy Program", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/Website-Privacy-Policy.aspx" }, { "last_modified": null, "section": "Program", "summary": "Last updated: October 13, 2023 Q1: What is the UK Extension to the EU-U.S. DPF and how does it relate to the EU-U.S. DPF? The UK Extension to the EU-U.S. DPF provides", "title": "FAQs–UK-Extension-to-the-EU–U.S.-Data-Privacy-Framework-(UK-Extension-to-the-EU–U.S.-DPF)", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/Privacy-Shield-and-the-UK-FAQs.aspx" }, { "last_modified": null, "section": "Program", "summary": "Last updated: September 16, 2024 Q1: What is the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) and how does it relate to the Swiss-U.S. Privacy Shield Framework? On September", "title": "FAQs – Swiss–U.S.-Data-Privacy-Framework-(Swiss–U.S.-DPF)-(1–4)", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/Swiss-U-S-Privacy-Shield-FAQs.aspx" }, { "last_modified": null, "section": "Program", "summary": "Last updated: July 17, 2023 Q1: What is the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and how does it relate to the EU-U.S. Privacy Shield Framework? On July 16, 2020, the", "title": "FAQs – EU–U.S.-Data-Privacy-Framework-(EU–U.S.-DPF)", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/EU-U-S-Privacy-Shield-Program-Update.aspx" }, { "last_modified": null, "section": null, "summary": "News & Events September 16, 2024: On August 14, 2024, the Swiss Federal Council announced its decision recognizing the adequacy of the Swiss-U.S. DPF and that the corresponding", "title": "Data Privacy Framework (DPF) Program News and Events", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/News-and-Events.aspx" }, { "last_modified": null, "section": "Framework", "summary": "a. Application of EU Member State Laws or the Principles i. EU/Member State law applies to the collection of the personal data and to any processing that takes place prior to the", "title": "14–Pharmaceutical-and-Medical-Products", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/14-Pharmaceutical-and-Medical-Products.aspx" }, { "last_modified": null, "section": "Program", "summary": "The following FAQs are relevant when personal data is transferred from the European Union to the United States for processing purposes only. When responding to individuals seeking", "title": "FAQs – Processing-Guidance", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/FAQs-Processing-Guidance.aspx" }, { "last_modified": null, "section": "Program", "summary": "The following FAQs are relevant to an organization preparing to come into compliance with the EU-U.S. DPF Accountability for Onward Transfer Principle. Q1: Are participating", "title": "FAQs – Onward-Transfer-Principle", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/FAQs-Onward-Transfer-Principle.aspx" }, { "last_modified": null, "section": "Program", "summary": "Q1: Will the EU-U.S. Data Privacy Framework (EU-U.S. DPF) serve as a data transfer mechanism under the EU General Data Protection Regulation (GDPR)? Yes. Article 45 of the GDPR", "title": "FAQs–General", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/General-FAQs.aspx" }, { "last_modified": null, "section": "Program", "summary": "Q5: How can an organization that already participates in the EU-U.S. DPF self-certify its compliance for the first time pursuant to the Swiss-U.S. DPF? If your organization has", "title": "FAQs – Swiss–U.S.-Data-Privacy-Framework-(Swiss–U.S.-DPF)-(5–6)", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/Swiss-U-S-Privacy-Shield-5-9.aspx" }, { "last_modified": null, "section": null, "summary": "Data Privacy Framework (DPF) Program Overview The EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. Data Privacy Framework (UK Extension to the EU-U.S.", "title": "Data Privacy Framework (DPF) Overview", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/Privacy-Shield-Program-Overview.aspx" }, { "last_modified": null, "section": null, "summary": "SWISS-U.S. DATA PRIVACY FRAMEWORK Download Full Text of the Swiss-U.S. Data Privacy Framework Principles and Annex I Swiss-U.S. Data Privacy Framework Principles I. Overview II.", "title": "EU-US-Framework-Switzerland", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/EU-US-Framework-Switzerland.aspx" }, { "last_modified": null, "section": "Program", "summary": "Contact the participating organization Many of your questions or concerns can be addressed most quickly by contacting the participating organization directly; therefore, that", "title": "How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization’s-Compliance-with-the-DPF-Principles", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/How-to-Submit-a-Complaint.aspx" }, { "last_modified": null, "section": "Framework", "summary": "The parties will select arbitrators for the Swiss-U.S. Data Privacy Framework Panel from the list of arbitrators developed under the EU-U.S. DPF, as supplemented by a list of", "title": "F–The-Arbitration-Panel–SWISS", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/F-The-Arbitration-Panel-SWISS.aspx" }, { "last_modified": null, "section": "Framework", "summary": "The Department and the Swiss Federal Administration have agreed, consistent with applicable law, to the adoption of arbitration rules that govern proceedings before the Swiss-U.S.", "title": "G–Arbitration-Procedures–SWISS", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/G-Arbitration-Procedures-SWISS.aspx" }, { "last_modified": null, "section": "Framework", "summary": "The parties will select arbitrators for the EU-U.S. Data Privacy Framework Panel from the list of arbitrators discussed below. Consistent with applicable law, the Department and", "title": "F–The-Arbitration-Panel", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/F-The-Arbitration-Panel.aspx" }, { "last_modified": null, "section": "Framework", "summary": "Under this arbitration option, the “Swiss-U.S. Data Privacy Framework Panel” (the arbitration panel consisting of one or three arbitrators, as agreed by the parties) has the", "title": "B–Available-Remedies–SWISS", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/B-Available-Remedies-SWISS.aspx" }, { "last_modified": null, "section": "Framework", "summary": "The Department and the Commission have agreed, consistent with applicable law, to the adoption of arbitration rules that govern proceedings before the EU-U.S. Data Privacy", "title": "G–Arbitration-Procedures", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/G-Arbitration-Procedures.aspx" }, { "last_modified": null, "section": "Framework", "summary": "Under this arbitration option, the “EU-U.S. Data Privacy Framework Panel” (the arbitration panel consisting of one or three arbitrators, as agreed by the parties) has the authority", "title": "B–Available-Remedies", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/B-Available-Remedies.aspx" }, { "last_modified": null, "section": "Framework", "summary": "1. While the United States and Switzerland share a commitment to enhancing privacy protection, the rule of law, and a recognition of the importance of transatlantic data flows to", "title": "OVERVIEW–SWISS", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/OVERVIEW-sw.aspx" }, { "last_modified": null, "section": "Program", "summary": "Administration of the Data Privacy Framework (DPF) Program The Data Privacy Framework (DPF) program is administered by the International Trade Administration (ITA) within the U.S.", "title": "Administration-of-the-Data-Privacy-Framework-(DPF)-Program", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/Administration-of-Privacy-Shield.aspx" }, { "last_modified": null, "section": "Framework", "summary": "d. Recourse Mechanisms i. Individuals should be encouraged to raise any complaints they may have with the relevant organization before proceeding to independent recourse mechanisms", "title": "11–Dispute-Resolution-and-Enforcement–(d–e)", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/11-Dispute-Resolution-and-Enforcement-d-e.aspx" }, { "last_modified": null, "section": "Framework", "summary": "f. FTC Action i. The FTC has committed to reviewing on a priority basis referrals alleging non-compliance with the Principles received from: (i) privacy self-regulatory bodies and", "title": "11–Dispute-Resolution-and-Enforcement–(f–g)–SWISS", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/11-Dispute-Resolution-and-Enforcement-f-g-SWISS.aspx" }, { "last_modified": null, "section": "Framework", "summary": "d. Recourse Mechanisms i. Individuals should be encouraged to raise any complaints they may have with the relevant organization before proceeding to independent recourse mechanisms", "title": "11–Dispute-Resolution-and-Enforcement–(d–e)–SWISS", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/11-Dispute-Resolution-and-Enforcement-d-e-SWISS.aspx" }, { "last_modified": null, "section": "Framework", "summary": "a. The Recourse, Enforcement and Liability Principle sets out the requirements for Swiss-U.S. DPF enforcement. How to meet the requirements of point (a)(ii) of the Principle is set", "title": "11–Dispute-Resolution-and-Enforcement–(a–c)–SWISS", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/11-Dispute-Resolution-and-Enforcement-a-c-SWISS.aspx" }, { "last_modified": null, "section": "Framework", "summary": "a. Organizations will implement their commitment to cooperate with DPAs as described below. Under the EU-U.S. DPF, U.S. organizations receiving personal data from the EU must", "title": "5–The-Role-of-the-Data-Protection-Authorities–(a–b)", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/5-The-Role-of-the-Data-Protection-Authorities-a-b.aspx" }, { "last_modified": null, "section": "Framework", "summary": "c. Cooperation with the FDPIC i. The cooperation with the FDPIC will be provided in the form of information and advice in the following way: 1. The advice of the FDPIC will be", "title": "5–The-Role-of-the-Federal-Data-Protection-and-Information-Commissioner–(c–d)–SWISS", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/5-The-Role-of-the-Federal-Data-Protection-and-Information-Commissioner-c-d-SWISS.aspx" }, { "last_modified": null, "section": "Framework", "summary": "a. Organizations will implement their commitment to cooperate with the FDPIC as described below. Under the Swiss-U.S. DPF, U.S. organizations receiving personal data from", "title": "5–The-Role-of-the-Federal-Data-Protection-and-Information-Commissioner–(a–b)–SWISS", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/5-The-Role-of-the-Data-Protection-Authorities-a-b-SWISS.aspx" }, { "last_modified": null, "section": "Program", "summary": "The United States has issued Executive Order 14086, “Enhancing Safeguards for United States Signals Intelligence Activities” and 28 CFR part 201 amending Department of Justice", "title": "How-to-Submit-a-Request-Relating-to-U-S-National-Security-Access-to-Data", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/How-to-Submit-a-Request-Relating-to-U-S-National-Security-Access-to-Data.aspx" }, { "last_modified": null, "section": "Program", "summary": "The EU-U.S. Data Privacy Framework (EU-U.S. DPF) Principles, which apply to the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (", "title": "Participation-Requirements-Data-Privacy-Framework-(DPF)-Principles", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/Requirements-of-Participation.aspx" }, { "last_modified": null, "section": "Program", "summary": "Private Sector Enforcement Participating organizations are required to remedy problems arising out of a failure to comply with the Data Privacy Framework (DPF) Principles. As part", "title": "Enforcement-of-the-Data-Privacy-Framework-(DPF)-Program", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/Enforcement-of-Privacy-Shield.aspx" }, { "last_modified": null, "section": "Program", "summary": "As explained in , when personal data is transferred from the European Union and/or Switzerland to the UnitedSupplemental Principle on Obligatory Contracts for Onward Transfers", "title": "Contract-Requirements-for-Data-Transfers-to-a-Processor", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/Contract-Requirements-for-Data-Transfers-to-a-Processor.aspx" }, { "last_modified": null, "section": "Framework", "summary": "a. The Recourse, Enforcement and Liability Principle sets out the requirements for EU-U.S. DPF enforcement. How to meet the requirements of point (a)(ii) of the Principle is set", "title": "11–Dispute-Resolution-and-Enforcement–(a–c)", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/11-Dispute-Resolution-and-Enforcement-a-c.aspx" }, { "last_modified": null, "section": "Framework", "summary": "f. FTC Action i. The FTC has committed to reviewing on a priority basis referrals alleging non-compliance with the Principles received from: (i) privacy self-regulatory bodies and", "title": "11–Dispute-Resolution-and-Enforcement–(f–g)", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/11-Dispute-Resolution-and-Enforcement-f-g.aspx" }, { "last_modified": null, "section": "Framework", "summary": "c. Operation of DPA Panels i. The cooperation of the DPAs will be provided in the form of information and advice in the following way: 1. The advice of the DPAs will be delivered", "title": "5–The-Role-of-the-Data-Protection-Authorities–(c)", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/5-The-Role-of-the-Data-Protection-Authorities-c.aspx" }, { "last_modified": null, "section": "Framework", "summary": "d. An organization that wishes its EU-U.S. DPF benefits to cover human resources data transferred from the EU in the context of the employment relationship must commit to cooperate", "title": "5–The-Role-of-the-Data-Protection-Authorities–(d–e)", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/5-The-Role-of-the-Data-Protection-Authorities-d-e.aspx" }, { "last_modified": null, "section": null, "summary": "EU-U.S. DATA PRIVACY FRAMEWORK Download Full Text of the EU-U.S. Data Privacy Framework EU-U.S. Data Privacy Framework Principles I. Overview II. Principles 1. Notice 2. Choice 3.", "title": "EU-US-Framework-European-Union", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/EU-US-Framework-European-Union.aspx" }, { "last_modified": null, "section": null, "summary": "UK EXTENSION TO THE EU-U.S. DATA PRIVACY FRAMEWORK Download Full Text of the UK Extension to the EU-U.S. Data Privacy Framework UK Extension to the EU-U.S. Data Privacy Framework", "title": "EU-US-Framework-United-Kingdom", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/EU-US-Framework-United-Kingdom.aspx" }, { "last_modified": null, "section": "Framework", "summary": "a. In order to provide transparency in respect of lawful requests by public authorities to access personal information, participating organizations may voluntarily issue periodic", "title": "16–Access-Requests-by-Public-Authorities–SWISS", "url": "https://itaisinternationaltrade.sharepoint.com/sites/DataPrivacyFrameworkProgram/SitePages/DataPrivacyContentPages/16-Access-Requests-by-Public-Authorities-SWISS.aspx" } ], "source_url": "https://dpfapi.azurewebsites.net/api/Content/search/privacy" } ```