Monday

25th Sep 2023

EU top court bins 'Privacy Shield' in Schrems privacy case

  • This ruling is the second big win for Austrian privacy activist Max Schrems (l), who also won a landmark case on data transfer in 2015 that led to the invalidation of the 'Privacy Shield' predecessor - the 'Safe Harbour' programme (Photo: Martin Hanzel)

Austrian privacy activist Max Schrems on Thursday welcomed the decision by the European Union's Court of Justice (ECJ) in his case against Facebook, which ruled that the EU-US data transfer pact fails to protect EU citizens' rights to privacy.

The EU-US 'Privacy Shield' - an agreement to share personal data for commercial purposes in use by more than 5,300 companies - was previously criticised by privacy activists and MEPs on the civil liberties committee - who called for its suspension in 2018.

Read and decide

Join EUobserver today

Become an expert on Europe

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

  • Austrian privacy activist Schrems argued that Facebook made personal data transferred to it available to certain US authorities - such as the NSA and FBI (Photo: Amy Osborne / Getty Images)

"I am very happy about the judgment. It seems the court has followed us in all aspects. This is a total blow to the Irish DPC [Data Protection Commission] and Facebook," said Schrems in a statement.

"The US will have to seriously change their surveillance laws if US companies want to continue to play a major role in the EU market," he added.

This ruling is the second big win for Schrems, who won a landmark case on data transfer in 2015 that led to the invalidation of the Privacy Shield's predecessor - the 'Safe Harbour' programme.

After Safe Harbour was scrapped by the EU's top court, Facebook started using so-called standard contractual clauses to shift the data to the United States.

At the end of 2015, Schrems issued a complaint about Facebook to the Irish data protection authorities, the site of Facebook's European HQ, and called for the suspension of Facebook's use of these clauses - claiming that these data transfers lack sufficient data-protection safeguards.

After Irish data protection authorities referred the matter to the country's High Court in 2016, they subsequently referred it to the ECJ with 11 questions that challenged EU-US data transfers more generally.

Fine print

While the long-standing legal battle led to the invalidation EU-US Privacy Shield on Thursday, the ECJ also recognised that standard contractual clauses are a valid tool for data transfers between the EU and third countries.

However, the ruling also points out that any EU regulator - such as the Irish data protection authorities - has the obligation to suspend or prohibit data transfers which take place under standard contractual clauses to third countries where data protections are not adequate.

EU concerns about data transfers mounted following revelations of US mass surveillance made in 2013 by former National Security Agency (NSA) agent Edward Snowden.

In his complaint, Schrems argued that Facebook made personal data transferred to it available to certain US authorities, such as the NSA and FBI - which could carry out mass surveillance on EU citizens without a meaningful legal framework.

The ECJ ruling concluded on Thursday that non-US persons can be potentially targeted by surveillance programmes for foreign intelligence and the US-EU Privacy Shield, therefore, cannot ensure a level of protection equivalent to that guaranteed by the EU data protection rules (GDPR).

Additionally, the court noted that EU citizens do not enjoy the same remedies as US citizens since the Fourth Amendment to the American constitution, used to challenge unlawful surveillance, does not apply to EU citizens.

'Deeply disappointed'

The commission said that they will engage in bilateral contact with their American counterparts to discuss how to improve and align the data transfer agreement to the ruling.

"I see this an opportunity for the EU to continue the dialogue with our American partners and as an opportunity to engage in solutions that reflect the values we share as democratic societies," said the EU commissioner for values and transparency Věra Jourová.

Following the announcement of the judgment, US secretary of commerce Wilbur Ross said that he was "deeply disappointed" that the EU's top court scrapped a key arrangement between Europe and the US.

"We hope to be able to limit the negative consequences to the $7.1 trillion [€6.2 trillion] transatlantic economic relationship that is so vital to our respective citizens, companies, and governments," he said in a statement.

"As our economies continue their post-Covid-19 recovery, it is critical that companies be able to transfer data without interruption, consistent with the strong protections offered by Privacy Shield," Ross added.

Watchdogs concerned by EU-US data pact

European data protection authorities tell US to improve oversight on 'Privacy Shield' scheme, otherwise they would go to the EU's highest court.

US firms ignoring EU court ruling on data, Schrems warns

Facebook and other big US firms have no intention of respecting the landmark ruling by the EU's highest court on data transfers to the US. The court in July dramatically scrapped Privacy Shield, citing US surveillance concerns.

Opinion

Schrems privacy ruling risks EU's ties to digital world

With more and more trade moving to the digital realm, Europe can ill-afford to cut itself off. Meanwhile, China continues to advance a vision for an internet that is fractured along national boundaries and controlled by governments.

AI will destroy more female jobs than male, study finds

About four percent of global female employment is subject to potential automation through generative AI technologies, compared to only 1.4 percent of male employment. The trend is even more pronounced in high-income countries, a new study reveals.

Column

EU lobbying clean-up — what happened to that?

Six months after Qatargate, as institutional inertia and parliamentary privileges weigh in, the sense of gravity and collective resolve have all but disappeared. MEPs show little enthusiasm for reform of the rules that today allow them significant outside paid activities.

Latest News

  1. Europe's energy strategy: A tale of competing priorities
  2. Why Greek state workers are protesting new labour law
  3. Gloves off, as Polish ruling party fights for power
  4. Here's the headline of every op-ed imploring something to stop
  5. Report: Tax richest 0.5%, raise €213bn for EU coffers
  6. EU aid for Africa risks violating spending rules, Oxfam says
  7. Activists push €40bn fossil subsidies into Dutch-election spotlight
  8. Europe must Trump-proof its Ukraine arms supplies

Stakeholders' Highlights

  1. International Medical Devices Regulators Forum (IMDRF)Join regulators, industry & healthcare experts at the 24th IMDRF session, September 25-26, Berlin. Register by 20 Sept to join in person or online.
  2. UNOPSUNOPS begins works under EU-funded project to repair schools in Ukraine
  3. Georgia Ministry of Foreign AffairsGeorgia effectively prevents sanctions evasion against Russia – confirm EU, UK, USA
  4. International Medical Devices Regulators Forum (IMDRF)Join regulators & industry experts at the 24th IMDRF session- Berlin September 25-26. Register early for discounted hotel rates
  5. Nordic Council of MinistersGlobal interest in the new Nordic Nutrition Recommendations – here are the speakers for the launch
  6. Nordic Council of Ministers20 June: Launch of the new Nordic Nutrition Recommendations

Stakeholders' Highlights

  1. International Sustainable Finance CentreJoin CEE Sustainable Finance Summit, 15 – 19 May 2023, high-level event for finance & business
  2. ICLEISeven actionable measures to make food procurement in Europe more sustainable
  3. World BankWorld Bank Report Highlights Role of Human Development for a Successful Green Transition in Europe
  4. Nordic Council of MinistersNordic summit to step up the fight against food loss and waste
  5. Nordic Council of MinistersThink-tank: Strengthen co-operation around tech giants’ influence in the Nordics
  6. EFBWWEFBWW calls for the EC to stop exploitation in subcontracting chains

Join EUobserver

Support quality EU news

Join us