U.S., EU reach agreement on Safe Harbor alternative

The agreement on the new Privacy Shield framework will make it easier for companies to transfer data between Europe and the US

Goodbye Safe Harbor, hello Privacy Shield: that's the name given by European Union and U.S. negotiators to the deal they struck on Tuesday enabling legal transfers of personal data between the two regions.

EU-US Privacy Shield "will protect the fundamental rights of Europeans where their data is transferred to the United States and ensure legal certainty for businesses," the European Commission said in a press release announcing the agreement.

Designed to replace the Safe Harbor agreement that was struck down in October, the new deal imposes stronger obligations for U.S. companies to protect the personal data of European citizens. It also calls for stronger monitoring and enforcement by the U.S. Department of Commerce and the Federal Trade Commission, both of which will cooperate with European data-protection authorities to address any complaints by EU citizens. A dedicated new ombudsman will help oversee complaints and enquiries as well.

Finally, there will be a joint annual review focused on monitoring and ensuring that commitments are upheld.

"The EU and the United States are the closest allies," said Andrus Ansip, vice president of the EC in charge of Digital Single Market, in a press conference on Tuesday. "On a topic as important as this, we had to find common solutions. I believe this new arrangement is what Europe needs -- both our citizens and our businesses will benefit from this."

U.S. Secretary of Commerce Penny Pritzker was similarly optimistic. 

"It's been a long road, but we've turned the corner and now we stand together," Pritzker said during a press call on Tuesday. "This will allow the digital economy in both the EU and the U.S. to continue to grow."

As part of the agreement, the Department of Commerce will ensure that U.S. companies publish their commitments to protect Europeans' privacy, making them enforceable under U.S. law by the US. Federal Trade Commission. In addition, any company handling human resources data from Europe has to commit to comply with decisions by European DPAs.

Meanwhile, the U.S. has given the EU written assurances for the first time that data access for law enforcement and national security will be subject to clear limitations, safeguards and oversight mechanisms. The U.S. has ruled out indiscriminate mass surveillance on the personal data transferred inside its borders. The annual joint review will include the issue of national security access, with participation by national intelligence experts from the U.S. and European Data Protection Authorities.

Coming up next, the EU College of Commissions has mandated Ansip and the European Commissioner for Justice, Consumers and Gender Equality, Vĕra Jourová, to prepare a draft "adequacy decision" in the coming weeks. That, in turn, could then be adopted by the College after obtaining the advice of the Article 29 Working Party and after consulting a committee composed of representatives of the Member States. In the meantime, the U.S. side will make the necessary preparations to put in place the new framework, monitoring mechanisms and new ombudsman.

Though it was applauded by the U.S. Direct Marketing Association and Microsoft President and Chief Legal Officer Brad Smith, reactions elsewhere were decidedly less enthusiastic about the new agreement. 

"We urgently need a thorough legal appraisal of the safeguards offered by the U.S.," said Sophie in 't Veld, vice president and spokesperson for data protection for the Alliance of Liberal Democrats in Europe. "The legal status of these safeguards is very unclear. It is highly doubtful that they offer meaningful protection to European citizens."

Similarly, "the emperor is trying on a new set of clothes," said Joe McNamee, Executive Director of European Digital Rights. "Today's announcement means that European citizens and businesses on both sides of the Atlantic face an extended period of uncertainty while waiting for this new stop-gap solution to fail." 

At least one U.S. company was also skeptical.

"European attitudes toward data privacy have not changed, and we suspect it will only be a matter of time before Safe Harbor 2.0 is challenged in court," said Yorgen Edholm, CEO of Accellion. "Ultimately, the practice of trans-Atlantic data transfer will remain controversial as long as there remains a fundamental difference of opinion between the U.S. and the EU on what is more important: national security or data privacy. We don’t believe Safe Harbor 2.0 will end this debate.”

Meanwhile, Europe's data protection authorities were meeting on Tuesday, a day before they are scheduled to publish an evaluation on how recent changes in U.S. law affect trans-Atlantic data transfer using alternative legal mechanisms. They will likely also offer an opinion on the Privacy Shield deal.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Katherine Noyes

IDG News Service
Show Comments

Cool Tech

Toys for Boys

Family Friendly

Stocking Stuffer

SmartLens - Clip on Phone Camera Lens Set of 3

Learn more >

Christmas Gift Guide

Click for more ›

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Aysha Strobbe

Microsoft Office 365/HP Spectre x360

Microsoft Office continues to make a student’s life that little bit easier by offering reliable, easy to use, time-saving functionality, while continuing to develop new features that further enhance what is already a formidable collection of applications

Michael Hargreaves

Microsoft Office 365/Dell XPS 15 2-in-1

I’d recommend a Dell XPS 15 2-in-1 and the new Windows 10 to anyone who needs to get serious work done (before you kick back on your couch with your favourite Netflix show.)

Maryellen Rose George

Brother PT-P750W

It’s useful for office tasks as well as pragmatic labelling of equipment and storage – just don’t get too excited and label everything in sight!

Cathy Giles

Brother MFC-L8900CDW

The Brother MFC-L8900CDW is an absolute stand out. I struggle to fault it.

Luke Hill

MSI GT75 TITAN

I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?