Sunday

11th Apr 2021

EU data chiefs failed to report US privacy complaints

  • Anti-snooping mural in London (Photo: nolifebeforecoffee)

The US top privacy enforcer Jessica Rich on Wednesday (21 October) said EU national data protection authorities did little to help crack down on violations under Safe Harbour.

Rich is the bureau director at the US Federal Trade Commission (FTC).

Read and decide

Join EUobserver today

Become an expert on Europe

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

The FTC oversaw Safe Harbour, an invalidated 15-year old scheme that was supposed to make sure US firms applied European privacy standards when dealing with the personal data of EU citizens.

Rich said European national data authorities were supposed to alert the FTC of any possible violations under the scheme but they seldom did.

“During the entire time we were enforcing the Safe Harbour, we had gotten only four referrals”, she told reporters in Brussels.

Rich said she had met and asked her European counterparts at various conferences to send the FTC complaints but her advice was not followed.

“The referral process was not working and at a certain point, we decided to start looking for Safe Harbour violations ourselves”, she said.

One independent study found hundreds of US firms had made false claims they belonged to self-certification scheme.

Rich said the FTC acted on some of them after being informed.

The FTC had filed 40 cases over the 15 years. All were settled out of court.

“We alleged a couple of years ago that Google violated its order and in fact it then paid a $22.5 million penalty”, she said.

Max Schrems

The European Court of Justice in Luxembourg earlier this month scrapped the pact following a lengthy legal battle between Facebook and Austrian privacy campaigner Max Schrems.

Schrems had initially filed a complaint with Ireland’s data protection commissioner but was told his case was “frivolous”. He then took it to Ireland's high court, which referred the case to Luxembourg.

Schrems had said Facebook, which has its international headquarters based in Dublin, could not guarantee the privacy of his data stored in the United States because of US-led mass surveillance.

The 29-year old PhD student told this website that it is an issue of European data protection authorities “not doing their jobs in all countries properly”.

“I just know that the Irish have a memorandum of understanding with the FTC so apparently they know each other and even there they were not able to refer my complaint”, he said.

Safe Harbour 2.0

Several thousand US firms, including giants like Apple, Facebook, Google, had signed up to Safe Harbour.

With the agreement now scrapped, many are faced with a legal dilemma on how transfer and process data from the EU.

Those who relied only on Safe Harbour will now have to use alternative transfer methods like model contractual clauses. Model contracts, which contain data protection provisions, have to be either approved by an EU data protection authority or the European Commission.

Meanwhile, the European commission and its US counterparts have spent the past two years negotiating a new Safe Harbour agreement.

The Brussels-executive had issued 13 recommendations for the US but the Americans refuse to budge on national security issues.

The FTC is negotiating the points related to commerce but Rich refrained from discussing the national security aspects of the talks.

Schrems, for his part, said he doubts a new Safe Harbour will change anything.

“If we find an agreement, it is very likely that the Safe Harbour will be challenged in the court again,” he said.

He is now looking at other companies alleged to have collaborated with the US National Security Agency in the lead up to the mass surveillance revelations in 2013 “just to see if we get cases rolling there”.

“This is not a bashing the US case, this is a mass surveillance issue", he said.

EU imposes deadline for new US data pact

The European Commission is using the European Court of Justice ruling on Safe Harbour as a leverage to get a new deal with American authorities.

US firms ignoring EU court ruling on data, Schrems warns

Facebook and other big US firms have no intention of respecting the landmark ruling by the EU's highest court on data transfers to the US. The court in July dramatically scrapped Privacy Shield, citing US surveillance concerns.

News in Brief

  1. Turkey blames EU for sexist protocol fiasco
  2. France to close elite civil-service academy
  3. Covid-19 cases in UK drop 60%, study finds
  4. White House urges 'calm' after Northern Ireland riots
  5. Italy's Draghi calls Turkey's Erdoğan a 'dictator'
  6. Slovakia told to return Sputnik V amid quality row
  7. EU risks €87bn in stranded fossil fuel assets
  8. Obligatory vaccination not against human rights, European court says

Feature

Covid-hit homeless find Xmas relief at Brussels food centre

The Kamiano food distribution centre in Brussels is expecting 20 people every half hour on Christmas Day. For many, Kamiano is also more than that - a support system for those made homeless or impoverished.

Top court finds Hungary and Poland broke EU rules

EU tribunal said Hungary's legislation made it "virtually impossible" to make an asylum application. Restricting access to international protection procedure is a violation of EU rules.

Stakeholders' Highlights

  1. Nordic Council of MinistersDigitalisation can help us pick up the green pace
  2. Nordic Council of MinistersCOVID19 is a wake-up call in the fight against antibiotic resistance
  3. Nordic Council of MinistersThe Nordic Region can and should play a leading role in Europe’s digital development
  4. Nordic Council of MinistersNordic Council to host EU webinars on energy, digitalisation and antibiotic resistance
  5. UNESDAEU Code of Conduct can showcase PPPs delivering healthier more sustainable society
  6. Nordic Council of MinistersWomen benefit in the digitalised labour market

Latest News

  1. The Covid bell tolls for eastern Europe's populists
  2. Four deaths after taking Russian Sputnik V vaccine
  3. Post-Brexit riots flare up in Northern Ireland
  4. Advice on AstraZeneca varies across EU, amid blood clot fears
  5. Greenland election could see halt to rare-earth mining
  6. After 50 years, where do Roma rights stand now?
  7. Why Iran desperately wants a new nuclear deal
  8. Does new EU-ACP deal really 'decolonise' aid?

Join EUobserver

Support quality EU news

Join us