 This excludes many financial institutions (such as banks, investment houses, credit unions, and savings & loans institutions), telecommunication common carriers (including internet service providers), labor associations, non-profit organizations, agricultural co-operatives, and meat processors, journalists and most insurances, although it may include investment banks.After opting in, an organization must have appropriate employee training and an effective dispute mechanism in place, and self re-certify every 12 months in writing that it agrees to adhere to the U.S.–EU Safe Harbor Framework's principles, including notice, choice, access, and enforcement.It can either perform a self-assessment to verify that it complies with the principles, or hire a third-party to perform the assessment.