Tuesday

25th Sep 2018

Cracks emerge in EU US data 'shield'

  • The EU is hoping a new Privacy Shield will restore business confidence on data transfers to the US (Photo: Alessio Milan)

The next US administration can, if it so chooses, weaken an already patchy data sharing pact with the EU known as Privacy Shield.

The provisional agreement spells out how US companies can use the transferred data of EU nationals while respecting tough EU privacy laws.

Read and decide

Join EUobserver today

Support quality EU news

Get instant access to all articles — and 18 year's of archives. 30 days free trial.

... or join as a group

But fears are mounting a US administration headed by firebrand Donald Trump may attempt to punch holes in an agreement whose legal basis is largely based on promises and letters signed by top US officials.

Ted Dean, a US department of commerce official, told a room of skeptical MEPs on Thursday (17 March) that the US has made commitments to uphold its side of the bargain.

When pressed on the legal basis that ties the US to those commitments, he said it was in the commercial interest of the US to respect the rules.

"We've made these commitments, a new administration could look at them, but that is exactly why there is an annual review," he added.

His EU commission counterpart Tiina Astola echoed similar views, telling MEPs that possible changes is "a fact of life".

"Whenever an administration changes, when the legislature changes, there can be amendments and changes. But that is the fact of life," she said.

The two sides took years to reach a political agreement on how to protect the privacy of transferred data of EU citizens while allowing US firms to process and use that data for commercial ends.

Privacy Shield is supposed to ensure, among other things, that the US National Security Agency (NSA) won't bulk collect and use data of EU citizens once transferred to the US.

The entire agreement hinges on whether it can stand up against the scrutiny of the European Court of Justice in Luxembourg.

The Court last October scuppered a 15-year old Safe Harbour agreement following revelations by former NSA contractor Edward Snowden of US-led mass surveillance.

Over 4,000 US firms relied on Safe Harbour.

With Safe Harbour dead, many were at pains on how to transfer and use the data of EU citizens whose commercial value is estimated in the billions.

Negotiators on both sides of the Atlantic then scrambled to finalise the new Privacy Shield as a Safe Harbour replacement.

They then announced Shield at the start of February with much fanfare but without disclosing details on how it would work in practice.

Bulk collection still allowed

A few weeks later, the EU commission published a series of letters signed US state secretary John Kerry, commerce secretary Penny Pritzker, the Federal Trade Commission, and the Office of the Director of National Intelligence, amongst others.

Details in those letters show the US can still bulk collect data if targeted collection is somehow not feasible.

The EU commission says this is good enough, noting if the US fails to comply, it can suspend the pact.

"Even if bulk collection is sometimes allowed the sum total of these limitation and safeguards means there is no limitless collection and no limitless access, which is what the Court [ECJ] found to be in breach," said Astola.

The EU and US are hoping their arguments will re-inject business confidence among the thousands of firms that rely on processing data of EU nationals.

That includes restoring trust among the people whose data is being harvested. If people think the US will continue to violate their privacy, regardless of Privacy Shield, then they may turn away from US firms.

Some privacy advocates are describing Privacy Shield as a sham.

"Privacy Shield represents a step backwards for the scope and definition to the right of privacy," said Marc Rotenberg, president and Executive Director of the US-based Electronic Privacy Information Center.

He said section 702 of the US foreign Intelligence Surveillance Act (FISA) first needs to be repealed.

The section grants the US government sweeping powers to collect foreign intelligence information.

News in Brief

  1. ECB's Draghi set to clarify role in secretive G30 group
  2. Half of EU states at risk of missing recycling target
  3. Commission refers Poland to EU top court over rule of law
  4. Open Society Foundation takes Hungary to court
  5. EU court asked to rule on halting Brexit
  6. EU threatens Switzerland on stock trading
  7. Italy's new basic wage restricted to Italians
  8. UK tycoon offers to create pro-Brexit party

Opinion

Building a Europe more resilient to terrorism

One year to the day since the terror attacks in Barcelona and Cambrils, the commissioner for home affairs spells out what action the EU is taking now to protect against further attacks.

Stakeholders' Highlights

  1. NORDIC COUNCIL OF MINISTERSThe vital bioeconomy. New issue of “Sustainable Growth the Nordic Way” out now
  2. NORDIC COUNCIL OF MINISTERSThe Nordic gender effect goes international
  3. NORDIC COUNCIL OF MINISTERSPaula Lehtomaki from Finland elected as the Council's first female Secretary General
  4. NORDIC COUNCIL OF MINISTERSNordic design sets the stage at COP24, running a competition for sustainable chairs.
  5. Counter BalanceIn Kenya, a motorway funded by the European Investment Bank runs over roadside dwellers
  6. ACCACompany Law Package: Making the Best of Digital and Cross Border Mobility,
  7. IPHRCivil Society Worried About Shortcomings in EU-Kyrgyzstan Human Rights Dialogue
  8. UNESDAThe European Soft Drinks Industry Supports over 1.7 Million Jobs
  9. Mission of China to the EUJointly Building Belt and Road Initiative Leads to a Better Future for All
  10. IPHRCivil society asks PACE to appoint Rapporteur to probe issue of political prisoners in Azerbaijan
  11. ACCASocial Mobility – How Can We Increase Opportunities Through Training and Education?
  12. Nordic Council of MinistersEnergy Solutions for a Greener Tomorrow

Latest News

  1. Missing signature gaffe for Azerbaijan gas pipeline
  2. Every major city in Europe is getting warmer
  3. No chance of meeting EU renewable goals if infrastructure neglected
  4. Brexit and MEPs expenses in the spotlight This WEEK
  5. Wake-up call on European Day Against Islamophobia
  6. Sound of discord at 'Sound of Music' Salzburg summit
  7. Salzburg summit presses for bigger Frontex mandate
  8. UK's post-Brexit plan 'will not work', EU says

Stakeholders' Highlights

  1. UNICEFWhat Kind of Europe Do Children Want? Unicef & Eurochild Launch Survey on the Europe Kids Want
  2. Nordic Council of MinistersNordic Countries Take a Stand for Climate-Smart Energy Solutions
  3. Mission of China to the EUChina: Work Together for a Better Globalisation
  4. Nordic Council of MinistersNordics Could Be First Carbon-Negative Region in World
  5. European Federation of Allergy and AirwaysLife Is Possible for Patients with Severe Asthma
  6. PKEE - Polish Energy AssociationCommon-Sense Approach Needed for EU Energy Reform
  7. Nordic Council of MinistersNordic Region to Lead in Developing and Rolling Out 5G Network
  8. Mission of China to the EUChina-EU Economic and Trade Relations Enjoy a Bright Future
  9. ACCAEmpowering Businesses to Engage with Sustainable Finance and the SDGs
  10. Nordic Council of MinistersCooperation in Nordic Electricity Market Considered World Class Model
  11. FIFAGreen Stadiums at the 2018 Fifa World Cup
  12. Mission of China to the EUChina and EU Work Together to Promote Sustainable Development

Join EUobserver

Support quality EU news

Join us