Under Safe Harbor, the EU afforded the transfer of commercial data between the EU and the US despite the EU’s higher standards for privacy protections, provided that signatory US companies agree to comply with a set of privacy principles.