In addition, for the first time, the FTC alleged that Google's practices violated the US-EU Safe Harbor Framework.
The US-EU Safe Harbor Framework generally requires the following for Safe Harbor Self-Certification:
- An explanation as to how personal information is collected, shared, disclosed, used, and protected
- User choice to opt-in or opt-out of communications and services
- Limiting account access to the user