CASRO Safe Harbor Program
CASRO is pleased to offer the CASRO Safe Harbor Program in collaboration with the Council of Better Business Bureaus.
Please note that the CASRO Safe Harbor Program does not offer dispute resolution services for issues relating to the transfer of a company's own human resources data. However, such transfers are covered under the Safe Harbor – please refer to the Department of Commerce’s FAQ #9 for more information.
Complete the CASRO Safe Harbor Program application.
Review and sign the Participation Agreement (the CBBB Independent Complaint Handling Agreement is annexed to the Participation Agreement and is a second
Self-certify with the Department of Commerce within 30 days of our approval of your application.Your self-certification to Safe Harbor must be current in order to continue your participation in the CASRO Safe Harbor program. You may complete your self-certification online- export.gov/safeharbor.Please review the Commerce Department’s check list of the information you will need for self-certification.
Important: In the Department of Commerce’s "independent recourse mechanism” field, please state "CASRO Safe Harbor Program” and link to our Web page for consumers: https://www.casro.org/?complaintcasrosh.
The Department of Commerce developed two separate, albeit substantially similar, Safe Harbor Frameworks: the U.S.-EU Safe Harbor Framework and the U.S.-Swiss Safe Harbor Framework. Your self-certification to the Department of Commerce may be with regard to one or both of the Safe Harbor Frameworks; self-certification with regard to one Framework does automatically extend to the other.
The Department of Commerce has developed a certification mark for the U.S.-EU Safe Harbor Framework. In order to display the mark, participating U.S. companies must follow a specific set of instructions developed by the Department of Commerce. The mark may only be used by those companies that have self-certified their compliance with the Safe Harbor Privacy Principles, appear on the Department of Commerce’s official U.S.-EU Safe Harbor List, and have a "Certification Status” that is "Current”. Once you have received confirmation from the Department of Commerce that your self-certification has been finalized, you may contact the Department of Commerce about using the mark.
Any public misrepresentation concerning your company’s participation in the Department of Commerce’s Safe Harbor program or compliance with one or both of the Safe Harbor Frameworks may be actionable by the Federal Trade Commission (FTC) or other relevant government body.