The EU Commission and United States have confirmed a new adequacy decision for transatlantic data flows to the United States. While this does not impact Showbie Inc. directly as a Canadian company, we will review our partnership with US-based sub-processors to ensure the continued security of our customer data.
Socrative places a high priority on data protection and privacy for our users around the globe. We understand that our users, especially those residing in the European Union (EU), have concerns regarding the applicability of the EU-U.S. Data Privacy Framework (DPF) to Socrative. We would like to clarify that as a Canadian company, the EU-U.S. DPF does not have a direct impact on Showbie Inc., Socrative's parent company. We adhere to the data protection laws and regulations set forth by the Canadian government and the EU Commission reaffirmed the adequacy decision for Canada in 2019. We do, however, work with several US-based sub-processors and will review the implications of compliance and certification with the EU-U.S. DPF in our continued work with these companies.
We place immense importance on safeguarding the personal data of our users. When we engage with third-party sub-processors to assist in providing our services, we thoroughly vet them to ensure that they uphold strict data protection measures and adhere to applicable laws. To date, this has included the required use of EU Standard Contractual Clauses (SCCs) as the transfer mechanism for data transfers between the EU and U.S. As of July 17th, 2023, organizations that self-certify may begin relying on the EU-U.S. DPF to receive data transfers from the EU instead. Additional steps may be taken by organizations to rely on the UK Extension and the Swiss-U.S. DPF as well.
Our commitment to data protection and privacy remains constant, and we will continue to prioritize the security of your information while providing you with a seamless and secure experience on our platform. For more information, please review our Privacy Policy and our GDPR compliance. If you have any further questions or concerns, please contact privacy@socrative.com.
As of December 1, 2023, all of Socrative's US-based sub-processors are confirmed to be active participants of the EU-U.S. DPF. With the exception of Pubnub, all sub-processors are also active with the UK Extension to the EU-U.S. DPF. Data transfers to and from Pubnub pertaining to UK citizen data remain protected by Standard Contractual Clauses.