The Internet enables the constant transfer of data across national borders. At the same time, data protection regulation by the states varies greatly and cannot provide harmonized privacy standards. As a globally binding privacy regulation is highly unlikely, alternative approaches towards regulation need to be explored. A pragmatic solution can be an increased use of self regulation. The amount of governmental participation that differs in the three presented models of self regulation is crucial for the success of such standards.