Saturday

17th Nov 2018

Bulk collection still allowed under EU-US data 'shield'

  • Schrems (l) says the US will continue to bulk collect data despite EU-US Privacy Shield (Photo: Martin Hanzel)

The EU Commission on Monday (29 February) released details of a US data transfer agreement said to be worth some $260 billion.

But the Brussels executive warned it would not hesitate to suspend the self-certification pact should the current or next US administration fail to adhere to the new rules under the so-called EU-US Privacy Shield.

Read and decide

Join EUobserver today

Support quality EU news

Get instant access to all articles — and 18 year's of archives. 30 days free trial.

... or join as a group

"We will suspend and we mean it," an EU official told reporters in Brussels.

Austrian privacy campaigner Max Schrems, whose court case against Facebook helped shape Privacy Shield, said the latest agreement contained only minor improvements.

He noted the US still had wide bulk collection data powers despite US reforms

This includes, according to the US government, "countering certain activities of foreign powers; counterterrorism; counter-proliferation; cybersecurity; detecting and countering threats to US or allied armed forces; and combating transnational criminal threats, including sanctions evasion."

The EU official, for her part, says any bulk collection by the US would be an exception.

Signed letters

Letters signed by top US officials, and published in the US federal register, underpin the commitments made in Shield.

They include signatures by US secretary of state John Kerry, US secretary of commerce Penny Pritzker, and US commissioner of the federal trade commission Edith Ramirez.

"I don't expect that whoever comes next in the next US administration will easily play with that," added the official.

Privacy Shield, which still needs to be formalised before official launch, replaces an invalidated 15-year old data transfer agreement known as Safe Harbour.

The pact is supposed to ensure an "adequate" level of privacy protection whenever someone's data is transferred to the US from the EU.

The suspension threat is meant, in part, to address broader concerns that the latest deal would fall apart should it end up in the European Court of Justice in Luxembourg or should US counterparts fail to take it seriously.

The Luxembourg court last October scrapped Safe Harbour, which was riddled with loopholes and seldom enforced by the US Federal Trade Commission. Some 4,000 US firms had signed up to the pact.

The latest deal is the end result of two years of talks between EU and US negotiators following mass surveillance revelations by former National Security Agency contractor Edward Snowden.

The court ruled that any form of "access on a generalised basis to the content of electronic communications must be regarded as compromising the essence of the fundamental right to respect for private life”.

German Green MEP Jan Phillipp Albrecht, who steered the data protection bill through the parliament, remains sceptical that Shield can deliver.

"The new 'Privacy Shield' framework appears to amount to little more than a remarketed version of the pre-existing Safe Harbour decision, offering little more than cosmetic changes," he said in a statement.

The EU official said the commission would scrap the latest pact should US companies not "live up to the obligations they have signed up to" and if complaints by EU citizens are not properly handled.

Privacy Shield extends also to alternative data transfer contracts.

The pact contains a handful of novelties, including a US ombudsperson to oversee complaints by EU citizens on national security breaches, a joint annual review of the pact, and a 45-day response delay by companies.

“That is a tight deadline if you look at the structure of multinationals and complexity of cross border cases," said Jorg Hladjk, counsel at Hunton & Williams law firm in Brussels.

US under-secretary of state Catherine Novelli will oversee the ombudsperson role and steer individual complaints through the US system.

US companies that fail to comply could be delisted from the scheme or face possible fines from the US federal trade commission.

"Most of these cases will concern cases where an individual is asking for access or notification of his data for the processing of data to not be transferred to a company outside of Privacy Shield," said a second EU official.

The EU-US data deal that isn't

The lack of any legal documents and content on the new transatlantic data transfer agreement is raising doubts about the deal struck on Tuesday.

Cracks emerge in EU US data 'shield'

Issues of mass surveillance and a weak legal basis on a new data privacy deal with the US is casting doubt on its viability should it end up before the European Court of Justice in Luxembourg.

Agenda

Refugees, asylum and data protection This WEEK

Another EU summit will try to agree on the plan proposed by Turkey to take refugees in exchange for more help, while the Commission will present its proposal to overhaul the asylum system.

News in Brief

  1. US warns EU banks and firms against trading with Iran
  2. Merkel urged Romania not to move embassy to Jerusalem
  3. Protesters call for Czech leader to step down
  4. Former German chancellor labelled 'enemy' of Ukraine
  5. French lead opposition to Brexit deal on fisheries
  6. Private accounts of Danske Bank employees investigated
  7. UK's May defends Brexit deal to MPs, after ministers resign
  8. Brexit MP calls for 'no confidence' vote on May

Opinion

Interpol, China and the EU

China joins a long list of countries - including Russia - accused of abusing Interpol's 'Red Notice' system to harras activists and dissidents.

Stakeholders' Highlights

  1. NORDIC COUNCIL OF MINISTERSTheresa May: “We will not be turning our backs on the Nordic region”
  2. International Partnership for Human RightsOpen letter to Emmanuel Macron ahead of Uzbek president's visit
  3. International Partnership for Human RightsRaising key human rights concerns during visit of Turkmenistan's foreign minister
  4. NORDIC COUNCIL OF MINISTERSState of the Nordic Region presented in Brussels
  5. NORDIC COUNCIL OF MINISTERSThe vital bioeconomy. New issue of “Sustainable Growth the Nordic Way” out now
  6. NORDIC COUNCIL OF MINISTERSThe Nordic gender effect goes international
  7. NORDIC COUNCIL OF MINISTERSPaula Lehtomaki from Finland elected as the Council's first female Secretary General
  8. NORDIC COUNCIL OF MINISTERSNordic design sets the stage at COP24, running a competition for sustainable chairs.
  9. Counter BalanceIn Kenya, a motorway funded by the European Investment Bank runs over roadside dwellers
  10. ACCACompany Law Package: Making the Best of Digital and Cross Border Mobility,
  11. International Partnership for Human RightsCivil Society Worried About Shortcomings in EU-Kyrgyzstan Human Rights Dialogue
  12. UNESDAThe European Soft Drinks Industry Supports over 1.7 Million Jobs

Latest News

  1. Brexit dominates EU affairs This WEEK
  2. How the EU commission got tunnel vision on self-driving cars
  3. No-confidence calls against May put Brexit deal in doubt
  4. Key points of the Brexit deal (if it ever comes into effect)
  5. Romania heaps scorn on 'revolting' EU criticism
  6. US steps in to clean up Cyprus
  7. 'Decisive progress' on Brexit as British cabinet backs deal
  8. Asylum for Macedonia's ex-PM puts Orban on spot

Stakeholders' Highlights

  1. Mission of China to the EUJointly Building Belt and Road Initiative Leads to a Better Future for All
  2. International Partnership for Human RightsCivil society asks PACE to appoint Rapporteur to probe issue of political prisoners in Azerbaijan
  3. ACCASocial Mobility – How Can We Increase Opportunities Through Training and Education?
  4. Nordic Council of MinistersEnergy Solutions for a Greener Tomorrow
  5. UNICEFWhat Kind of Europe Do Children Want? Unicef & Eurochild Launch Survey on the Europe Kids Want
  6. Nordic Council of MinistersNordic Countries Take a Stand for Climate-Smart Energy Solutions
  7. Mission of China to the EUChina: Work Together for a Better Globalisation
  8. Nordic Council of MinistersNordics Could Be First Carbon-Negative Region in World
  9. European Federation of Allergy and AirwaysLife Is Possible for Patients with Severe Asthma
  10. PKEE - Polish Energy AssociationCommon-Sense Approach Needed for EU Energy Reform
  11. Nordic Council of MinistersNordic Region to Lead in Developing and Rolling Out 5G Network
  12. Mission of China to the EUChina-EU Economic and Trade Relations Enjoy a Bright Future

Join EUobserver

Support quality EU news

Join us