zation with respect to personal information received from the EU; and 3. description of the organization's privacy policy for such personal information, including: a. where the privacy policy is available for viewing by the public, b. its effective date of implementation, c. a contact office for the handling of complaints, access requests, and any other issues arising under the Safe Harbor, d. the