Safe Harbor R.I.P.

Stefan Siebenkittel

Hi,

my company is located in Germany and uses a variety of smartsheets, which sometimes contain personal data (names and addresses etc.).

The Safe Harbor framework has been a fundamental precondition for the transfer of personal data to the U.S. and it formed part of Smartsheets privacy policy. 

 

Seen from EU, the United States are now unsafe regarding privacy and data protection. My company now has no legal basis allowing transfer / handling of personal data with Smartsheet.

 

 

We can now either eliminate any personal data in our smartsheets (don't want that),

or have a so called EU standard contractul clauses agreement signed (yes please!) . 

 

Unlike other U.S. based providers of cloudbased software, we did not get any information from Smartsheet.

Any other EU customers having this issue?

Ken Asher

Stefan,

 

Smartsheet's security and compliance practices have been built in alignment with US and EU law and have not changed as a result of the recent ruling on Safe Harbor.  US-based providers such as Smartsheet are anticipating that clarification regarding the process of transferring data from the EU to the US will be forthcoming. Smartsheet will continue to monitor this issue.

 

I have reached out to our security and legal team and they have informed me that we are currently evaluating how best to serve our customers in the EU related to the Safe Harbor decision.  Please rest assured that we are working on it and will come back to you once we have decided on a solution. 

 

Best,

 

Ken

 

Smartsheet Security Specialist

Angela Crampton

Stefan, I came across your post whilst researching this issue.  We are in the same position and I have been advised by Smartsheet that they will not sign any agreements or 'Model contracts'  as we know them.  I have been advised that they are waiting for the rollout of Privacy Shield which is not due to be released until June. As part of the process a member state, the Council or the European Parliament could seek to refer the draft Privacy Shield to the CJEU or ask the Commission to maintain, amend or withdraw the draft decision which means delaying the release or abandoning it altogether.  

 

We have no option but to close down all sheets that have personal data in them.  Very dissapointed with Smartsheet.

 

Have they responded to you since October?

 

Angela 

 

Aki

Hi,

 

Can someone from Smartsheet please explain why you still havent signed up to the new Privacy Shield framework and why you still tout Safe Harbor on the privacy page when it is no longer valid?

 

Thanks.

Gwyneth C

Hi Aki,

 

Looks like you also posted this question in a related thread. Linking to that from here

https://community.smartsheet.com/discussion/privacy-shield so that others can see the response.

 

Cheers!

Gwyneth

Chris Magill

Great news! Smartsheet's EU Privacy Shield application has been approved and Smartsheet is now officially Privacy Shield certified! Our certification can be viewed on the Privacy Shield web site here: https://www.privacyshield.gov/participant?id=a2zt0000000CbpFAAS&status=Active

You'll also find the changes reflected in Smartsheet's Privacy Policy at Smartsheet.com/Privacy