Supporting statement for List of Arbitrators 0625-0277

SUPPORTING STATEMENT

EU-U.S. PRIVACY SHIELD INVITATION FOR APPLICATIONS FOR INCLUSION ON THE LIST OF ARBITRATORS

OMB CONTROL NO. 0625-0277

A. JUSTIFICATION

1. Explain the circumstances that make the collection of information necessary.

The purpose of this request of the Paperwork Reduction Act (PRA) clearance is to allow the Department of Commerce (DOC), as represented by the International Trade Administration (ITA), to collect information from individuals applying for inclusion on the list of arbitrators as specified in Annex I of the EU-U.S. Privacy Shield Framework.

The arbitral mechanism, outlined in Annex I, is a critical component of the EU-U.S. Privacy Shield Framework and must be implemented as soon as possible to preserve the integrity of the Privacy Shield program. More than 2,000 U.S.-based organizations currently rely on the Privacy Shield to transfer the personal data from Europe to the United States necessary to do business across the Atlantic. In recognition of the importance of the Framework to transatlantic commerce and data protection, the Privacy Shield Framework reflects commitments made at the highest levels across multiple U.S. Government agencies. The Departments of Commerce, State, Justice, and Transportation as well as the Federal Trade Commission and Office of the Director of National Intelligence are working together to ensure the Framework is fully implemented and functioning as intended.

The DOC and the European Commission will work together to implement the arbitration mechanism, including by jointly developing a list of at least 20 arbitrators. Parties to a binding arbitration under this Privacy Shield mechanism may only select arbitrators from this list.

2. Explain how, by whom, how frequently, and for what purpose the information will be used. If the information collected will be disseminated to the public or used to support information that will be disseminated to the public, then explain how the collection complies with all applicable Information Quality Guidelines.

As described in Annex I of the Privacy Shield, the DOC and the Commission have committed to implement an arbitration mechanism to provide European individuals with the ability to invoke binding arbitration to determine, for residual claims, whether an organization has violated its obligations under the Privacy Shield.  Organizations voluntarily self-certify to the Privacy Shield and, upon certification, the commitments they have made to comply with the Privacy Shield become legally enforceable under U.S. law. Organizations that self-certify to the Privacy Shield commit to binding arbitration of residual claims if the individual chooses to exercise that option. Under the arbitration option, a Privacy Shield Panel (consisting of one or three arbitrators, as agreed by the parties) has the authority to impose individual-specific, non-monetary equitable relief (such as access, correction, deletion, or return of the individual’s data in question) necessary to remedy the violation of the Privacy Shield only with respect to the individual. The parties will select the arbitrators from the list of arbitrators developed by DOC and the Commission.

Eligible individuals which apply to be included on the list of arbitrators will be evaluated on the basis of independence, integrity, and expertise:

Independence:

• Freedom from bias and prejudice.

Integrity:

• Held in the highest regard by peers for integrity, fairness and good judgment.

• Demonstrates high ethical standards and commitment necessary to be an arbitrator.

Expertise:

      Required:

• Admission to practice law in the U.S.

• Level of demonstrated expertise in U.S. privacy law and EU data protection law.

      Other expertise that may be considered includes any of the following:

• Relevant educational degrees and professional licenses.

• Relevant professional or academic experience or legal practice.

• Relevant training or experience in arbitration or other forms of dispute resolution

Evaluation of applications for inclusion on the list of arbitrators will be undertaken by the DOC and the Commission. Selected applicants will remain on the list for a period of 3 years, absent exceptional circumstances, change in eligibility, or for cause, renewable for one additional period of 3 years.

3. Describe whether, and to what extent, the collection of information involves the use of automated, electronic, mechanical, or other technological techniques or other forms of information technology.

Eligible individuals who wish to be considered for inclusion on the EU-U.S. Privacy Shield List of Arbitrators are invited to submit applications. Applications must be typewritten and should be headed “Application for Inclusion on the EU-U.S. Privacy Shield List of Arbitrators.” Applications must be submitted to Nasreen Djouini at the DOC either by email at [email protected], or by fax at: 202-482-5522.

4. Describe efforts to identify duplication.

There is no duplication. This collection of information is unique and directly related to implementing the arbitration mechanism described in Annex I of the Privacy Shield. Individuals must apply and demonstrate that they meet the specific requirements set forth in in Annex I of the Privacy Shield.

5. If the collection of information involves small businesses or other small entities, describe the methods used to minimize burden.

The collection of information is directed at eligible individuals and does not involve small business or other small entities. To be eligible for inclusion on the list, applicants must be admitted to practice law in the United States and have expertise in both U.S. privacy law and EU data protection law. Applicants shall not be subject to any instructions from, or be affiliated with, any Privacy Shield organization, or the U.S., EU, or any EU Member State or any other governmental authority, public authority or enforcement authority.

6. Describe the consequences to the Federal program or policy activities if the collection is not conducted or is conducted less frequently.

Preventing or limiting the collection of information associated with the invitation for application for inclusion on the list of arbitrators under the Privacy Shield would prevent the U.S. Government from implementing the Privacy Shield Framework as agreed between the European Commission and the DOC. As a result, the flow of personal data from the EU and to the United States could be seriously disrupted, with significant negative effects for U.S. businesses. Currently, over 2,000 U.S.-based organizations rely on the Privacy Shield to transfer personal data from the EU to the United States in support of transatlantic commerce.

7. Explain any special circumstances that require the collection to be conducted in a manner inconsistent with OMB guidelines.

Collection of information will be made in a manner consistent with OMB guidelines.

8. Provide information on the PRA Federal Register Notice that solicited public comments on the information collection prior to this submission. Summarize the public comments received in response to that notice and describe the actions taken by the agency in response to those comments. Describe the efforts to consult with persons outside the agency to obtain their views on the availability of data, frequency of collection, the clarity of instructions and recordkeeping, disclosure, or reporting format (if any), and on the data elements to be recorded, disclosed, or reported.

A Federal Register Notice requesting comments from the public was recently announced in the Federal Register on Thursday, September 7, 2017, Volume 82, page 42294.

A single comment was received in regards to requirement three (expertise) for Inclusion on the Arbitral Panel for the Privacy Shield. The comment inquires whether sufficient education and receipt of an LLM degree satisfies the requirement to “demonstrate admittance to practice law in the U.S.” The DOC has consulted with the inquirer to clarify that the Privacy Shield Framework requires that arbitrators serving on the panel must be able to practice law in the U.S. and thereby be barred in the United States. To that end, an LLM degree does not satisfy the requirement outlined in the Framework.

9. Explain any decisions to provide payments or gifts to respondents, other than remuneration of contractors or grantees.

Not Applicable.

10. Describe any assurance of confidentiality provided to respondents and the basis for assurance in statute, regulation, or agency policy.

Information collected through applications for inclusion on the list of arbitrators will not be made publicly available. Evaluation of applications for inclusion on the list of arbitrators will be undertaken by the DOC and the European Commission.

11. Provide additional justification for any questions of a sensitive nature, such as sexual behavior and attitudes, religious beliefs, and other matters that are commonly considered private.

No questions of a sensitive nature are included in this information collection.

12. Provide an estimate in hours of the burden of the collection of information.

The total expected number of application for inclusion on the list of arbitrators is approximately 60 applications. DOC estimates an average burden of 4 hours per submission. 60 responses/applications x 4 hours (i.e., 240 minutes) = 240 hours total burden.

Type of Response	Response Time	No. of Respondents	Total Hours
Submission of applications for inclusion on the List of Arbitrators	4 hours (i.e., 240 minutes)	60	240

13. Provide an estimate of the total annual cost burden to the respondents or record-keepers resulting from the collection (excluding the value of the burden hours in Question 12 above).

The estimated annual cost burden to respondents, excluding the value of the burden hours in Question 12, is $0.

Note:

The DOC’s ITA is implementing Annex I of the Privacy Shield arbitration mechanism to support the operation of the EU-U.S. Privacy Shield Framework, which will require eligible individuals to submit applications for inclusion on the list of arbitrators. Selected applicants will remain on the list for a period of 3 years, absent exceptional circumstances; change in eligibility, or for cause, renewable for one additional period of 3 years.

14. Provide estimates of annualized cost to the Federal government.

Note: This estimate is calculated by first determining the hourly rate, and the estimated time that it takes to process the form or questionnaire. The hourly rate is calculated by taking the approximate GS rating/step for the type of employee performing the relevant tasks and adding 30% to that rate to account for overhead and other basic costs. For purposes of this calculation $36.14/hour is assumed to be the approximate GS rating/step; therefore, the rate used is $46.98 ($36.14 + $10.84).

Type of Response	Processing Time	No. of Respondents	Total Hours
Review and processing of applications for inclusion on the list of Arbitrators (via FRN notice)	4 hours (i.e., 240 minutes)	60	240

Cost to Federal government per response: Response Time (4 hours) x Average Salary ($46.98/hour) = $187.92

Total cost: Total Hours (240 hours) x Average Salary ($46.98/hour) = $11,275.20

15. Explain the reasons for any program changes or adjustments.

This is a new information collection.

16. For collections whose results will be published, outline the plans for tabulation and publication.

The information collected from respondents will be evaluated by DOC in consultation with the European Commission to develop a list of at least 20 arbitrators. The list of arbitrators selected will be made public via website by the Privacy Shield arbitration administrator.

17. If seeking approval to not display the expiration date for OMB approval of the information collection, explain the reasons why display would be inappropriate.

Not Applicable.

18. Explain each exception to the certification statement.

Not Applicable.

B. COLLECTIONS OF INFORMATION EMPLOYING STATISTICAL METHODS

This collection does not employ statistical methods.

7