To join the Privacy Shield Framework, a U.S.-based organization is required to self-certify to the Department of Commerce and publicly commit to comply with the Framework’s requirements. While joining the Privacy Shield is voluntary, the GDPR goes far beyond it.

Co-regulation encompasses initiatives in which government and industry share responsibility for drafting and en-forcing regulatory standards

policy makers and scholars should explore an alternative approach known as “co-regulation.