Wednesday

29th Nov 2023

EU court invalidates EU-US data transfer pact

  • The ECJ ruled itself as final arbiter on whether or not a commission decision on Safe Harbour is valid (Photo: katarina_dzurekova)

Judges in Luxembourg on Tuesday (6 October) delivered a blow against a 15-year old EU-US data transfer pact.

The European Court of Justice (ECJ) rejected the so-called Safe Harbour agreement and declared it invalid.

Read and decide

Join EUobserver today

Become an expert on Europe

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

Privacy campaigner Max Schrems, whose complaint against Facebook Ireland initiated the case, said the judgment “clarifies that mass surveillance violates our fundamental rights".

He said the judgement makes it "clear that US businesses cannot simply aid US espionage efforts in violation of European fundamental rights".

The EU judges said Ireland’s court must now decide whether to suspend the transfer of data from Facebook to the United States.

The verdict also affects some 4,400 US firms that have signed up to the self-certification agreement.

Safe Harbour is supposed to provide an “adequate” level of protection whenever data from EU citizens is transferred to the US.

EU data protection authorities had no power to investigate compliance.

But the Luxembourg judges said national supervisors authorities “must be able to examine, with complete independence” the transfer of data to US.

The pact has come under intense scrutiny following 2013 media revelations of mass and indiscriminate spying by the US intelligence services on EU citizens.

The scandal revealed the Maryland-based National Security Agency (NSA) obtained access to data of EU citizens held by big US firms like Apple, Facebook, Google and others.

Known as Prism, the top-secret programme allowed NSA officials to collect search history, live chat, file transfers, and the content of emails.

The case stems from a complaint filed by Schrems to Ireland’s data protection authority against Facebook Ireland in June 2013.

Schrems argued Facebook does not protect his data given the secret Prism programme. Facebook’s Irish subsidiary servers are located in the US, where his data is stored.

Ireland’s data chief dismissed the case a month later because Facebook had signed up to Safe Harbour. Schrems appealed and the Irish High Court then asked the Luxembourg-based court to intervene.

Companies in the scheme declare they respect the data protection guidelines.

But their claims are not subject to any compulsory independent verification. Instead, the companies police themselves.

One study showed hundreds of the US companies lied about belonging to the programme.

So far, the US Federal Trade Commission (FTC) brought 37 cases for making false claims.

The US government enforcement body also has no oversight powers in sectors like financial services, transport, and telecommunications.

The European Parliament wants the agreement scrapped.

"Today's ECJ ruling is the nail in the coffin of Safe Harbour”, said Dutch liberal MEP Sophie In' t Veld.

German Green MEP Jan Phillip Albrecht, who steered the parliament's data protection reforms, said the [European] Commission and the Irish data protection commissioner must "immediately move to prevent any further data transfers to the US in the framework of Safe Harbour".

The Commission in 2014 threatened to suspend it, but then issued 13 recommendations to the US on how to improve it.

Almost two years later and talks are still ongoing, in part, because the US does not want to tinker with national security exemptions.

EU-US data sharing at risk

Future EU-US data sharing risks complications if the EU Court follows the opinion of Yves Bot, its attorney general, issued on Wednesday.

EU defends US data pact, as Facebook court case opens

An Austrian privacy campaigner vs Facebook over the future of data transfers to the US case opened at the European Court of Justice in Luxembourg on Tuesday. The European Commission, meanwhile, says the Privacy Shield pact is working fine.

EU imposes deadline for new US data pact

The European Commission is using the European Court of Justice ruling on Safe Harbour as a leverage to get a new deal with American authorities.

Latest News

  1. The EU's 'no added sugars' fruit-juice label sleight-of-hand
  2. EU belittles Russia's Lavrov on way to Skopje talks
  3. Member states stall on EU ban on forced-labour products
  4. EU calls for increased fuel supplies into Gaza
  5. People-smuggling profits at historic high, EU concedes
  6. EU bets big on fossil hydrogen and carbon storage
  7. How centre-right conservatives capitulate to the far-right
  8. My experience trying to negotiate with Uber

Stakeholders' Highlights

  1. Friedrich Naumann FoundationPoems of Liberty – Call for Submission “Human Rights in Inhume War”: 250€ honorary fee for selected poems
  2. World BankWorld Bank report: How to create a future where the rewards of technology benefit all levels of society?
  3. Georgia Ministry of Foreign AffairsThis autumn Europalia arts festival is all about GEORGIA!
  4. UNOPSFostering health system resilience in fragile and conflict-affected countries
  5. European Citizen's InitiativeThe European Commission launches the ‘ImagineEU’ competition for secondary school students in the EU.
  6. Nordic Council of MinistersThe Nordic Region is stepping up its efforts to reduce food waste

Stakeholders' Highlights

  1. UNOPSUNOPS begins works under EU-funded project to repair schools in Ukraine
  2. Georgia Ministry of Foreign AffairsGeorgia effectively prevents sanctions evasion against Russia – confirm EU, UK, USA
  3. Nordic Council of MinistersGlobal interest in the new Nordic Nutrition Recommendations – here are the speakers for the launch
  4. Nordic Council of Ministers20 June: Launch of the new Nordic Nutrition Recommendations
  5. International Sustainable Finance CentreJoin CEE Sustainable Finance Summit, 15 – 19 May 2023, high-level event for finance & business
  6. ICLEISeven actionable measures to make food procurement in Europe more sustainable

Join EUobserver

Support quality EU news

Join us