Box Looks Beyond Privacy Shield With EU Binding Corporate Rule Approval

Box claims it now offers customers in Europe the highest possible standard for data protection after the European Union (EU) gave the company approval for Binding Corporate Rules (BCRs) – an alternative to the invalidated Safe Harbour legislation.

Safe Harbour, the previous data sharing agreement between the EU and US, was declared invalid in October last year and had been relied upon by Box and other major US tech firms to operate across the Atlantic.

Box COO Dan Levin told TechWeekEurope earlier this month at BoxWorks 2016 in San Francisco that invalidation was an “extraordinary” course of action for the European Court to take and that regulation needed to be adapted for cloud technology.

Box privacy

After months of negotiations, a proposed replacement for Safe Harbor called Privacy Shield has emerged, but Box said earlier this year it was still “looking” at the proposed regulations as well as a number of alternatives, namely BCRs.

Now the company has completed the EU approval process from various data protection authorities, including the UK’s Information Commissioner’s Office (ICO), Box can now act as both a data processor for its customers and a controller for its employees.

BCRs are company-specific, as opposed to the general regulations of Safe Harbor and Privacy Shield, and are deemed to be the EU’s highest possible data protection standard.

The cloud collaboration platform claims to be one of fewer than five US companies to have received the accreditation and the only one in its sector, highlighting the privacy and security it can afford potential clients, especially in regulated industries.

European push

“This is a huge milestone as we continue to scale internationally while focusing on offering what we believe to be the most secure enterprise content management platform in the world,” said Joel Benavides, Box’s senior director for global legal and advocacy. “The DPA’s approval of our BCRs enables companies across Europe to deploy a validated cloud environment in accordance with the highest data protection standards available today.”

Box has made international expansion a priority and has made several moves to boost the security and privacy of its product to attract new users in regulated sectors such as finance, health and the public sector.

These include encryption key management, data retention polices and data residency options, such as Box Zones, which gives customers a choice of data centres around the world in which to store information.

Quiz: What do you know about the cloud in 2016?

Steve McCaskill

Steve McCaskill is editor of TechWeekEurope and ChannelBiz. He joined as a reporter in 2011 and covers all areas of IT, with a particular interest in telecommunications, mobile and networking, along with sports technology.

Recent Posts

Regulator Demands Answers Over Tesla FSD Social Media Posts

US regulator says Tesla's messaging on social media could lead drivers to believe 'Full Self-Driving'…

2 hours ago

US Takes Chip Equipment Makers To Task Over China Sales

US lawmakers write to biggest chip equpment makers in US, Japan, Netherlands asking for data…

2 hours ago

Nvidia Market Value Surges Above $3.6tn

Investor optimism following Donald Trump re-election win pushes Nvidia to record high, adds 30 percent…

3 hours ago

ASML IT Outage Disrupts Worldwide Operations

Dutch chip equipment maker ASML says 'fully recovered' from IT outage affecting operations worldwide and…

3 hours ago

Judge Dismisses Personal Claims Against Meta’s Zuckerberg

US federal judge finds Meta chief excutive Zuckerberg can't be held personally liable in child-addiction…

4 hours ago

China’s SMIC Benefits From AI Chip Boom In Spite Of Sanctions

Chinese chip manufacturing giant SMIC says AI has helped boost revenues to record levels in…

4 hours ago