Dit heeft betrekking op Safe Harbor Certification:

http://export.gov/safeharbor/

In dat verband heeft 'eligibility' betrekking op de bedrijven die (willen) deelnemen in het Safe Harbor-programma.

"US-EU Safe Harbor is a streamlined process for US companies to comply with the EU Directive 95/46/EC on the protection of personal data.
Intended for U.S. organizations that process personal data collected in the EU, the Safe Harbor Principles are designed to assist eligible organizations to comply with the EU Data Protection Directive and maintain the privacy and integrity of that data. U.S. companies can opt into the program (I.e. self-certify) as long as they adhere to the 7 principles and 15 frequently asked questions." ( http://www.privacytrust.org/guidance/safe_harbor.html )


"Once on the register of Safe Harbor, the organisation must self-certify annually. It does this by verifying its compliance with the principles by means of internal or external audits. At least once a year a statement must be signed by a corporate officer, or other authorised representative of the organisation, to the effect that the organisation has conducted an assessment which verifies the organisation's compliance. This statement must then be made available upon request or whenever the organisation's compliance is being investigated.

An organisation's privacy policy must specify:

- the statutory body which has jurisdiction to hear complaints against it;
- the names of any privacy programs of which it is a member; and
- the independent dispute resolution mechanism by which complaints may be investigated.

( http://www.out-law.com/page-8173 )

Ik denk dat met 'eligibility file' gedoeld wordt op het dossier met gegevens en documenten gerelateerd aan (de deelname van bedrijf XXX in) het SH-programma.

De 'agent' ontvangt geregeld een update van dat eligibility dossier uit handen van de werkgever. De agent laat hier weten dat de onder de SH-certificering vallende personeelsinformatie beperkt is tot hetgeen is neergelegd in het 'eligibility' dossier en dat hij die personeelsinformatie uitsluitend gebruikt voor de doeleinden neergelegd in de Privacy Policy van bedrijf XXX.

Het heeft m.i. in ieder geval niets te maken met het recht om te werken.