Arcserve Compliant With EU-US Privacy Shield Framework

Certification ensures company’ cloud solutions adhere to the EU-US privacy shield framework for the collection, use and retention of personal information transferred from the European Union to the US
Guarantees compliance of business data stored in Arcserve’s private cloud, putting the company on a short list of vendors who are 100% compliant with the GDPR
The firm assures current and future GDPR compliance with secure backup, DR, HA and archiving solutions for physical, virtual and cloud environments

Arcserve, LLC has been certified as compliant with the EU-US Privacy Shield Framework, a requirement by the General Data Protection Regulation (GDPR) slated to go into effect May 25, 2018.

With this certification, the US Department of Commerce guarantees GDPR compliance for all data stored in Arcserve’s private cloud, making the company 100% compliant across business processes, data centers and cloud technologies.

GDPR is arguably the most notable, and potentially costly, regulation in EU law to address the data protection and privacy for all individuals living within the European Union.

The EU-US Privacy Shield Framework set forth by the US Department of Commerce, pertains to the collection, use and retention of personal information transferred from the European Union to the United States. Organizations that store any personally-identifiable information of EU citizens within the US must do so with a certified backup vendor to adhere to the regulation. Those found to be non compliant face fines of up to €20 million or 4% of their global annual revenue, whichever is higher.

“It’s safe to say most organizations don’t realize their backup vendor could cost them €20 million , or roughly $23.6 million. But the stark reality is backup providers won’t get hit with the fine – their customers will,” said Oussama El-Hilali, VP of products, Arcserve. “It’s scary to think some providers tout their solutions as GDPR-friendly, yet their data center could be the very thing that puts their customers out of business. It’s our responsibility, as data protection vendors, to be certain we’re not endangering the viability of organizations that trust us to securely and properly store their data.“

Arcserve Solutions for GDPR
Firm’s backup and availability solutions encrypt data using a two-factor authentication process with 256-bit AES data encryption at the source, in-flight and at-rest. Organizations validate RTOs, RPOs and SLAs with automated DR testing and application-level recovery. Its secure backup, DR, HA and archiving solutions for physical, virtual and cloud infrastructures offer flexible storage options, including a choice of GDPR-compliant data centers located in the UK and US.

All products include role-based access functionality and multiple security features to prevent intentional and unintentional breaches, including password protection, monitoring, alerting, reporting and auditing. Arcserve’s support for varied levels of data availability include RTOs and RPOs ranging from seconds (continuous) to days. Its email archiving product, Arcserve UDP Cloud Archiving (registration required), includes a specifically-designed role for Data Protection Officers (DPOs) to manage the entire GDPR process, including quick response to Subject Access Requests (SARs) and the ability to perform the ‘right to be forgotten’ process, among others.