EU prepares to raise Privacy Shield over data transfers to U.S.

The European Commission is set to issue an adequacy decision early next week, bringing Privacy Shield into effect

European Union officials are set to give final approval to a new EU-U.S. data transfer agreement early next week, after member states gave their approval to an updated text on Friday.

Privacy Shield is intended to replace the Safe Harbor Agreement as a means to legalize the transfer of EU citizens' personal information to the U.S. while still respecting EU privacy laws.

A new deal is needed because the Court of Justice of the EU invalidated the Safe Harbor Agreement last October, concerned that it provided Europeans with insufficient protection from state surveillance when companies exported their personal data to the U.S. for processing.

The first draft of Privacy Shield agreement presented by the European Commission in January lacked key assurances from U.S. officials on the same matters that had concerned the CJEU about Safe Harbor.

The Article 29 Working Party, composed of national data protection authorities, remained skeptical even as the draft was amended in April, and in June the European Data Protection Supervisor (EDPS) joined the critics. Neither the working party nor the supervisor have the power to block the deal, though, as their role is merely to advise the Commission on such matters.

The European Parliament voted, with reservations, to approve Privacy Shield in May, and on Friday representatives of the EU's 28 national governments gave their assent to the deal, clearing the way for the Commission to give final approval to Privacy Shield in a so-called "adequacy decision" early next week.

The European Commissioner for Justice, Consumers and Gender Equality, Vĕra Jourová, is scheduled to present the deal to Parliament's Civil Liberties, Justice and Home Affairs Committee on Monday.

The U.S. has now given the EU written assurance that the access of public authorities for law enforcement and national security will be subject to clear limitations, safeguards and oversight mechanisms, and has ruled out indiscriminate mass surveillance of European citizens' data, she said Friday.

Businesses have been clamoring for the deal to be approved, as many have found their activities hamstrung by the invalidation of Safe Harbor. There are other ways for businesses to transfer Europeans' personal information to the U.S. for processing.

If the transfers are between subsidiaries of the same company, they can be safeguarded by binding corporate rules defining the responsibilities of the corresponding businesses. External transfers can also be protected by model contract clauses restricting what the receiving company may do with the data. And businesses also have the option of asking people to waive their rights to European standards of privacy by consenting to the export of their personal information.

Model contract clauses could yet have their day in court, as the Irish Data Protection Commissioner has asked the Irish High Court to refer a question about their validity to the CJEU. Europe's data protection authorities have also not excluded the possibility of seeking the CJEU's verdict on Privacy Shield.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags Privacy Shield

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.
Peter Sayer

Peter Sayer

IDG News Service
Show Comments

Cool Tech

Toys for Boys

Family Friendly

Stocking Stuffer

SmartLens - Clip on Phone Camera Lens Set of 3

Learn more >

Christmas Gift Guide

Click for more ›

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Aysha Strobbe

Microsoft Office 365/HP Spectre x360

Microsoft Office continues to make a student’s life that little bit easier by offering reliable, easy to use, time-saving functionality, while continuing to develop new features that further enhance what is already a formidable collection of applications

Michael Hargreaves

Microsoft Office 365/Dell XPS 15 2-in-1

I’d recommend a Dell XPS 15 2-in-1 and the new Windows 10 to anyone who needs to get serious work done (before you kick back on your couch with your favourite Netflix show.)

Maryellen Rose George

Brother PT-P750W

It’s useful for office tasks as well as pragmatic labelling of equipment and storage – just don’t get too excited and label everything in sight!

Cathy Giles

Brother MFC-L8900CDW

The Brother MFC-L8900CDW is an absolute stand out. I struggle to fault it.

Luke Hill

MSI GT75 TITAN

I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?