Saturday

18th Nov 2017

Cracks emerge in EU US data 'shield'

  • The EU is hoping a new Privacy Shield will restore business confidence on data transfers to the US (Photo: Alessio Milan)

The next US administration can, if it so chooses, weaken an already patchy data sharing pact with the EU known as Privacy Shield.

The provisional agreement spells out how US companies can use the transferred data of EU nationals while respecting tough EU privacy laws.

Thank you for reading EUobserver!

Subscribe now for a 30 day free trial.

  1. €150 per year
  2. or €15 per month
  3. Cancel anytime

EUobserver is an independent, not-for-profit news organization that publishes daily news reports, analysis, and investigations from Brussels and the EU member states. We are an indispensable news source for anyone who wants to know what is going on in the EU.

We are mainly funded by advertising and subscription revenues. As advertising revenues are falling fast, we depend on subscription revenues to support our journalism.

For group, corporate or student subscriptions, please contact us. See also our full Terms of Use.

If you already have an account click here to login.

But fears are mounting a US administration headed by firebrand Donald Trump may attempt to punch holes in an agreement whose legal basis is largely based on promises and letters signed by top US officials.

Ted Dean, a US department of commerce official, told a room of skeptical MEPs on Thursday (17 March) that the US has made commitments to uphold its side of the bargain.

When pressed on the legal basis that ties the US to those commitments, he said it was in the commercial interest of the US to respect the rules.

"We've made these commitments, a new administration could look at them, but that is exactly why there is an annual review," he added.

His EU commission counterpart Tiina Astola echoed similar views, telling MEPs that possible changes is "a fact of life".

"Whenever an administration changes, when the legislature changes, there can be amendments and changes. But that is the fact of life," she said.

The two sides took years to reach a political agreement on how to protect the privacy of transferred data of EU citizens while allowing US firms to process and use that data for commercial ends.

Privacy Shield is supposed to ensure, among other things, that the US National Security Agency (NSA) won't bulk collect and use data of EU citizens once transferred to the US.

The entire agreement hinges on whether it can stand up against the scrutiny of the European Court of Justice in Luxembourg.

The Court last October scuppered a 15-year old Safe Harbour agreement following revelations by former NSA contractor Edward Snowden of US-led mass surveillance.

Over 4,000 US firms relied on Safe Harbour.

With Safe Harbour dead, many were at pains on how to transfer and use the data of EU citizens whose commercial value is estimated in the billions.

Negotiators on both sides of the Atlantic then scrambled to finalise the new Privacy Shield as a Safe Harbour replacement.

They then announced Shield at the start of February with much fanfare but without disclosing details on how it would work in practice.

Bulk collection still allowed

A few weeks later, the EU commission published a series of letters signed US state secretary John Kerry, commerce secretary Penny Pritzker, the Federal Trade Commission, and the Office of the Director of National Intelligence, amongst others.

Details in those letters show the US can still bulk collect data if targeted collection is somehow not feasible.

The EU commission says this is good enough, noting if the US fails to comply, it can suspend the pact.

"Even if bulk collection is sometimes allowed the sum total of these limitation and safeguards means there is no limitless collection and no limitless access, which is what the Court [ECJ] found to be in breach," said Astola.

The EU and US are hoping their arguments will re-inject business confidence among the thousands of firms that rely on processing data of EU nationals.

That includes restoring trust among the people whose data is being harvested. If people think the US will continue to violate their privacy, regardless of Privacy Shield, then they may turn away from US firms.

Some privacy advocates are describing Privacy Shield as a sham.

"Privacy Shield represents a step backwards for the scope and definition to the right of privacy," said Marc Rotenberg, president and Executive Director of the US-based Electronic Privacy Information Center.

He said section 702 of the US foreign Intelligence Surveillance Act (FISA) first needs to be repealed.

The section grants the US government sweeping powers to collect foreign intelligence information.

MEPs point finger at Malta

The European Parliament debated shady deals and rule of law in Malta after the murder of Daphne Caruana Galizia, while the Commission wanted to avoid a "political fight".

Austrian privacy case against Facebook hits legal snag

Austrian privacy campaigner Max Schrems may sue Facebook Ireland in an Austrian court but won't be able to pursue a class action suit in Austria, according to a non-binding opinion by a top EU court advisor.

EU Parliament 'cookie' restrictions worry online media

The European Parliament and groups representing newspapers and magazines are at odds over how new privacy rules will affect the media, especially restrictions on website cookies - but one MEP thinks it could spark new business models.

EU Commission to target fake news

Mariya Gabriel, the EU digital economy commissioner, announces expert panel and says fake news can be tackled if people are given credible and diverse information.

MEPs ponder how to fight tax havens

After the Paradise Papers brought new revelations about tax dodging across the globe, including in the EU, the European Parliament wonders how to step up the fight.

MEPs point finger at Malta

The European Parliament debated shady deals and rule of law in Malta after the murder of Daphne Caruana Galizia, while the Commission wanted to avoid a "political fight".

News in Brief

  1. Bonn climate talks extend into Friday evening
  2. UK needs to move on Brexit by early December, Tusk says
  3. Puigdemont extradition decision postponed to December
  4. Ireland wants written UK guarantees to avoid hard border
  5. US did not obstruct climate talks, says German minister
  6. EU signs social declaration
  7. Puigdemont to be heard by Belgian judges
  8. Steep fall in migrants reaching EU

Stakeholders' Highlights

  1. European Jewish CongressAntisemitism in Europe Today: Is It Still a Threat to Free and Open Society?
  2. Counter BalanceNew Report: Juncker Plan Backs Billions in Fossil Fuels and Carbon-Heavy Infrastructure
  3. Nordic Council of MinistersNordic countries prioritise fossil fuel subsidy reform
  4. Mission of China to the EUNew era for China brings new opportunities to all
  5. ACCASmall and Medium Sized Practices Must 'Offer the Whole Package'
  6. UNICEFAhead of the African Union - EU Summit, Survey Highlights Impact of Conflict on Education
  7. Nordic Council of MinistersNordic Council Calls for Closer Co-Operation on Foreign Policy
  8. Swedish EnterprisesTrilogue Negotiations - Striking the Balance Between Transparency and Efficiency
  9. Access EuropeProspects for US-EU Relations Under the Trump Administration - 28 November 2017
  10. World Vision20 November: Exchange of Views at the EP on Children Affected by the Syria Crisis
  11. Nordic Council of MinistersSustainable Growth the Nordic Way: Climate Solutions for a Sustainable Future
  12. EU2017EEHow Data Fuels Estonia's Economy

Latest News

  1. EU keeps former Soviet states at arm's length
  2. EU leaders make pledge on social issues after populist backlash
  3. EU agencies and eastern neighbours This WEEK
  4. Germany slams Dutch call for more ambitious EU climate goal
  5. Mind the gap: inequality in our cities
  6. Climate activists 'disappointed' with EU at climate talks
  7. Davis outlines UK vision on Brexit in Berlin
  8. German coalition talks in near collapse