Wednesday

18th Jan 2017

EU questions decade-old US data agreement

  • Reding says US surveillance allegations is a "wake up call" for stronger data protection legislation. (Photo: eu2013.lt)

The European Commission is casting doubts on a 13-year old data sharing agreement with the United States.

EU justice commissioner Viviane Reding on Friday (19 July) told reporters in Lithuania’s capital Vilnius her services will be reviewing the so-called Safe Harbor Agreement.

Dear EUobserver reader

Subscribe now for unrestricted access to EUobserver.

Sign up for 30 days' free trial, no obligation. Full subscription only 15 € / month or 150 € / year.

  1. Unlimited access on desktop and mobile
  2. All premium articles, analysis, commentary and investigations
  3. EUobserver archives

EUobserver is the only independent news media covering EU affairs in Brussels and all 28 member states.

♡ We value your support.

If you already have an account click here to login.

“We do have the impression that the Safe Harbor Agreement, might not be so safe, after all,” she said.

The agreement was hammered out in 2000 between the US department of commerce and the European Commission, based on a clause in the current 1995 EU Data Protection Directive.

The around 3,000 companies that have voluntarily signed up follow a binding set of data transfer rules between the US and EU based on seven principles - notice, choice, onward transfer, security, integrity, access, and enforcement.

The low data protection standards built into the agreement is possibly a loophole, noted Reding.

“I’m working on a solid assessment of the Safe Harbor Agreement and I will present this assessment before the end of the year,” she said.

The US Federal Trade Commission (FTC) enforces Safe Harbor.

Some European data protection authorities have also expressed their doubts the agreement.

German deputy privacy commissioner Marit Hansen of Schleswig-Holstein’s data protection authority says the rules are seldom enforced in substance.

“I assume that if I write to a company as a data protection authority ‘you are in Safe Harbor please give some information on these principles and how you implement them in your business’ they will answer. So far no one was able to answer my question because they are not prepared to do that,’ she told this website in April.

In 2010, the US consultancy company Galexia found a number of irregularities in the agreement.

They noted in a report that 200 companies claimed to have joined the agreement without ever having done so. They also found only 350 companies which complied with the minimum standards of the agreement and that only one court case had been issued in over a ten-year period.

The FTC has since been more proactive and has issued twenty year consent orders on Twitter, Google, Facebook and MySpace which require them to be regularly audited.

In November last year, the FTC required Google to pay out $22.5 million over claims the Internet giant planted cookies on Apple’s Safari Internet browser.

Reding’s announcement on Safe Harbor follows a morning session of informal discussions with EU ministers of interior, which also touched upon the EU data protection regulation and the post-Stockholm programme on future justice priorities.

The on-going media revelations about the US Prism surveillance programme has provided extra new incentives for legislators to finalise negotiations on the data protection regulation and its adjoining directive.

Both policies aim to harmonise data protection rules throughout the EU but have suffered numerous setbacks as euro-deputies struggle to reach compromises on the 4,000 or so amendments.

German and French ministers in a joint-letter said the legislative data reforms need to advance with an aim to finalise negotiations between the European parliament and member states before the end of the Lithuanian EU Presidency.

“The justice ministers of the two countries signed a joint declaration saying that we need a high level of data protection for European citizens, which strikes the right balance between freedom and security,” said Reding.

She urged other ministers to demonstrate a similar drive to turn the data reforms into a binding EU law.

Estonia joins US in passing Magnitsky law

Estonia has voted to ban entry to foreigners deemed guilty of human rights abuses in a law targeting Russia and inspired by the Magnitsky case.

Children's rights at risk in EU hotspots

Lack of lawyers and other staff has caused logjams on asylum claims, which particularly hurt children, the EU Fundamental Rights Agency told MEPs.

News in Brief

  1. Maltese PM announces plan for Brexit summit
  2. EU needs more Turkey-style migrant deals, Malta PM says
  3. Dutch minister: Don't underestimate risk of hacking
  4. European court rules against Russia adoption ban on US
  5. Apple's bill to Ireland could rise to €1.6bn
  6. Scottish independence vote 'more likely' after May's Brexit speech
  7. US imposes sanctions on Bosnian Serb leader
  8. Spain 'broadly compliant' with EU fiscal rules

Stakeholders' Highlights

  1. Caritas EuropaEU States to Join Pope Francis’s Appeal to Care for Migrant Children
  2. UNICEFNumber of Unaccompanied Children Arriving by sea to Italy Doubles in 2016
  3. Nordic Council of Ministers"Nordic Matters" Help Forge Closer Bonds Between the UK and the Nordic Region
  4. Computers, Privacy & Data ProtectionThe age of Intelligent Machines: join the Conference on 25-27 January 2017
  5. Martens CentreNo Better way to Lift Your Monday Blues Than to Gloss Over our Political Cartoons
  6. Dialogue PlatformThe Gulen Movement: An Islamic Response to Terror as a Global Challenge
  7. European Free AllianceMinority Rights and Autonomy are a European Normality
  8. Swedish EnterprisesHow to Create EU Competitiveness Post-Brexit? Seminar on January 24th
  9. European Jewish CongressSchulz to be Awarded the European Medal for Tolerance for his Stand Against Populism
  10. Nordic Council of Ministers"Adventures in Moominland" Kick Off Nordic Matters Festival in London
  11. PLATO15 Fully-Funded PhDs Across Europe on the Post-Crisis Legitimacy of the EU - Apply Now!
  12. Dialogue PlatformInterview: Fethullah Gulen Condemns Assassination of Russian Ambassador to Turkey