In addition to the steps that an organization must take internally, nations and states face the need for providing privacy protection mechanisms to assure compliance with the safe harbor principles. There must also be recourse for individuals affected by noncompliance with the principles, and there must be consequences for an organization that violates safe harbor principles. Such mechanisms must include readily available and affordable independent recourse for an individual’s complaints and a method by which disputes can be investigated and resolved, as well as damages awarded where provided by the applicable law or private sector initiatives. There must also be documented procedures to verify that.
