Wednesday

13th Dec 2017

The EU-US data deal that isn't

  • The new data agreement is raising serious concerns among privacy groups (Photo: Valentina Pop)

The European Commission is broadly relying on promises from the US authorities that they will protect the fundamental rights of EU citizens on a data transfer deal that has no legal text.

Details of how the new EU US Privacy Shield will work in practice remain vague as threats emerge of a possible legal challenge in the European Court of Justice (ECJ) in Luxembourg.

Thank you for reading EUobserver!

Subscribe now for a 30 day free trial.

  1. €150 per year
  2. or €15 per month
  3. Cancel anytime

EUobserver is an independent, not-for-profit news organization that publishes daily news reports, analysis, and investigations from Brussels and the EU member states. We are an indispensable news source for anyone who wants to know what is going on in the EU.

We are mainly funded by advertising and subscription revenues. As advertising revenues are falling fast, we depend on subscription revenues to support our journalism.

For group, corporate or student subscriptions, please contact us. See also our full Terms of Use.

If you already have an account click here to login.

The deal, announced after two years of talks, replaces a loophole-riddled Safe Harbour agreement that was declared invalid by the EJC last October following media revelations of a US-led global digital dragnet.

Some 4,000 US firms had relied on Safe Harbour for 15 years, with hundreds having made false claims they adhered to the pact.

It will take weeks before the new deal launches, meaning the companies will now have to sign up to other transfer regimes or face possible fines.

The chair of the EU's main privacy regulatory body, the article 29 working party, Isabelle Falque-Pierrotin, told reporters in Brussels on Wednesday (3 February) it was unable to give any preliminary assessment of Privacy Shield.

Deal...what deal?

The regulatory body had given in October the EU and US negotiators a grace period extending to the end of January to finalise a new agreement, against a backdrop of potential "collective enforcement" action against US firms should its deadline be missed.

And while both sides announced the pact on Tuesday (2 February), it remains based on an "exchange of letters" akin to a handshake.

Falque-Pierrotin, who has since backed down on the enforcement threats, said she did not "know exactly what it [Privacy Shield] covers and what is the legal 'bindingness'".

Falque-Pierrotin wants the paperwork on Privacy Shield by the end of February to study its content and legal strength, with a final assessment due sometime at the end of March.

The probe will also determine if other transfer regimes can still be used in light of the new agreement, which are also riddled with problems.

But despite the issues, Falque-Pierrotin said the other transfer regimes could be used "until we have conducted and finalised the assessment of the new arrangement".

EU data regulators say Shield must respond to the wider concerns on the international transfer of personal data raised by the ECJ judgment.

Similar concerns were highlighted by the European Parliament.

British centre-left MEP Claude Moraes, who chairs the civil liberties committee, said the new pact "has too much in common with the previous Safe Harbour decision".

Substandard US laws

Past agreements often saw EU negotiators cave in to US demands on things like granting the Americans access to financial transaction data and allowing them to store airline passenger records for 15 years.

But the EU court's decision gave commission negotiators an added boost in talks and increased the hope amongst data privacy campaigners it would seal a deal that better protected privacy rights.

Despite moves by the US administration to prevent mass surveillance and boost privacy rules, its current laws remain substandard for EU data regulators.

"We still have concerns of the US legal framework", said Falque-Pierrotin.

One of the remaining issues is how to establish clear rules on data processing. Another is how to determine whether US intelligence access to personal data is necessary and proportionate.

She called for independent oversight of US intelligence and the ability for EU citizens to defend their rights.

"These four essential guarantees constitute a kind of European standard," she said.

She noted the new Privacy Shield may alleviate some those concerns but only once a complete analysis has been made by the end of March.

EU and US agree data 'Privacy Shield'

A new transatlantic agreement replaces the Safe Harbour deal with what the Commission says are increased guarantees for the protection of Europeans' personal data.

Romania wants EU signal on Schengen membership

Bucharest expects other member states to decide on its accession to the passport-free area before it takes the rotating EU presidency on 1 January 2019 - amid criticism of a controversial new justice reform.

Germany says China using LinkedIn to recruit informants

Germany's spy agency says the Chinese state is trying to recruit high-ranking German officials via social media outlets like LinkedIn. It accused Chinese intelligence of setting up fake profiles to lure them into becoming informants.

Germany says China using LinkedIn to recruit informants

Germany's spy agency says the Chinese state is trying to recruit high-ranking German officials via social media outlets like LinkedIn. It accused Chinese intelligence of setting up fake profiles to lure them into becoming informants.

News in Brief

  1. Russia looks to crypto-currencies to evade EU sanctions
  2. Juncker embroiled in Luxembourg wire-tapping trial
  3. Kurz close to forming new Austrian right-wing government
  4. Ministers reach deal on fish quotas but overfishing continues
  5. UK parliament to vote on right to veto final Brexit deal
  6. French government rules out Corsican autonomy
  7. Salmonella food poisoning on rise in Europe
  8. EU institutions agree to start talks on lobby register

Stakeholders' Highlights

  1. ACCACFOs Risk Losing Relevance If They Do Not Embrace Technology
  2. UNICEFMake the Digital World Safer for Children & Increase Access for the Most Disadvantaged
  3. European Jewish CongressWelcomes Recognition of Jerusalem as the Capital of Israel and Calls on EU States to Follow Suit
  4. Mission of China to the EUChina and EU Boost Innovation Cooperation Under Horizon 2020
  5. European Gaming & Betting AssociationJuncker’s "Political" Commission Leaves Gambling Reforms to the Court
  6. AJC Transatlantic InstituteAJC Applauds U.S. Recognition of Jerusalem as Israel’s Capital City
  7. EU2017EEEU Telecom Ministers Reached an Agreement on the 5G Roadmap
  8. European Friends of ArmeniaEU-Armenia Relations in the CEPA Era: What's Next?
  9. Mission of China to the EU16+1 Cooperation Injects New Vigour Into China-EU Ties
  10. EPSUEU Blacklist of Tax Havens Is a Sham
  11. EU2017EERole of Culture in Building Cohesive Societies in Europe
  12. ILGA EuropeCongratulations to Austria - Court Overturns Barriers to Equal Marriage

Latest News

  1. 2018 fishing quotas agreed - but Brexit muddies waters
  2. Medical HQ to spearhead EU military push
  3. Facebook to shift ad revenue away from Ireland
  4. EU renews glyphosate approval, pledges transparency
  5. Romania searching for EU respectability
  6. Last chance for Poland to return property to rightful owners
  7. Commission attacks Tusk on 'anti-European' migrant plan
  8. VW to EU: We will fail on recall promise

Stakeholders' Highlights

  1. Centre Maurits CoppietersCelebrating Diversity, Citizenship and the European Project With Fundació Josep Irla
  2. European Healthy Lifestyle AllianceUnderstanding the Social Consequences of Obesity
  3. Union for the MediterraneanMediterranean Countries Commit to Strengthening Women's Role in Region
  4. Bio-Based IndustriesRegistration for BBI JU Stakeholder Forum about to close. Last chance to register!
  5. European Heart NetworkThe Time Is Ripe for Simplified Front-Of-Pack Nutrition Labelling
  6. Counter BalanceNew EU External Investment Plan Risks Sidelining Development Objectives
  7. EU2017EEEAS Calls for Eastern Partnership Countries to Enter EU Market Through Estonia
  8. Dialogue PlatformThe Turkey I No Longer Know
  9. World Vision7 Million Children at Risk in the DRC: Donor Meeting to Focus on Saving More Lives
  10. EPSU-Eurelectric-IndustriAllElectricity European Social Partners Stand up for Just Energy Transition
  11. European Friends of ArmeniaSignature of CEPA Marks a Fresh Start for EU-Armenia Relations
  12. Nordic Council of MinistersNordic Energy Ministers Pledge to Work More Closely at Nordic and EU Level