Monday

20th Nov 2017

EU court to probe new Facebook data challenge

  • The EU's top court is set to revisit data transfers by Facebook to the United States (Photo: Eduardo Woo)

The High Court in Ireland wants the European Court of Justice to decide on a case that could have huge implications on Facebook data transfers from Europe to the United States.

On Tuesday (3 October), the court issued a 152-page judgment on Facebook's EU-US data transfers following revelations of US-led mass surveillance in 2013.

Thank you for reading EUobserver!

Subscribe now for a 30 day free trial.

  1. €150 per year
  2. or €15 per month
  3. Cancel anytime

EUobserver is an independent, not-for-profit news organization that publishes daily news reports, analysis, and investigations from Brussels and the EU member states. We are an indispensable news source for anyone who wants to know what is going on in the EU.

We are mainly funded by advertising and subscription revenues. As advertising revenues are falling fast, we depend on subscription revenues to support our journalism.

For group, corporate or student subscriptions, please contact us. See also our full Terms of Use.

If you already have an account click here to login.

Max Schrems, an Austrian privacy campaigner who had initially challenged Facebook in light of the US surveillance, said in a statement that the internet giant "seems to have lost in every argument they were making."

The five-week hearing had scoured through some 45,000 pages of documents in a move that appears to suggest that the United States may be violating the fundamental rights of Europeans.

Mass indiscriminate processing of data

The Irish court in its judgment said that "it is clear that there is mass indiscriminate processing of data by the United States government agencies, whether this is described as mass or targeted surveillance."

It noted that the "case raises issues of very major, indeed fundamental, concern to millions of people within the European Union and beyond".

EU law requires that the personal data of Europeans is "adequately protected" whenever it is transferred outside the European Union.

But the US spy hub, the National Security Agency (NSA), has been sweeping up and processing the same data regardless of EU laws, according to disclosures by US intelligence contractor Edward Snowden. The revelations sparked outrage throughout Europe.

Facebook's international seat is in Dublin. The Irish-based headquarter deals with over 85 percent of global Facebook users, which is then sent to its parent company in the United States for processing.

Facebook and similar US tech giants have been forced into a legal dilemma - to either comply with NSA demands or follow EU laws. The data transfers are worth billions to the companies.

Safe Harbour vs Privacy Shield

The European Court of Justice in 2015 had already knocked down a EU-US data sharing pact known as Safe Harbour, due in part, to mass surveillance.

The scheme has since been replaced by Privacy Shield, which itself has come under intense scrutiny given the lack of US efforts to fully implement the self-certifying agreement.

Tuesday's judgment refers to so-called standard contractual clauses that also allow the data transfers to take place.

Facebook Ireland started using the clauses with its parent US-based Facebook Inc after Safe Harbour became invalid.

The clauses have a built-in emergency feature that allows local European data protection authorities to stop the data flows, should the personal data of Europeans be violated while in the United States and elsewhere.

Schrems had argued that the Irish Data protection authority at the time was duty bound to trigger the emergency clause, given the NSA revelations.

But Tuesday's judgment now questions the validity of the standard contractual clauses in general, which had been approved by the European Commission.

Ireland's data protection commissioner, Helen Dixon, had probed Schrems complaint in 2016 and found his arguments against his data being transferred to the US compelling.

But she then questioned the validity of standard contractual clauses themselves, going beyond Schrem's initial complaint.

Schrems said such clauses are valid as they allow data protection authorities to suspend individual problematic data flows.

"It is still unclear to me why the DPC [data protection commissioner] is taking the extreme position that the SCCs [standard contractual clauses,] should be invalidated Facebook across the board, when a targeted solution is available," he said.

The Luxembourg-based court is set to receive the exact questions from the Irish High Court to be probed at a later date.

US tests EU patience over Privacy Shield

The data sharing pact with the US is yet to be fully implemented, as the Americans have failed to appoint people in key positions to ensure EU citizens' personal data is protected.

Austrian privacy case against Facebook hits legal snag

Austrian privacy campaigner Max Schrems may sue Facebook Ireland in an Austrian court but won't be able to pursue a class action suit in Austria, according to a non-binding opinion by a top EU court advisor.

Investigation

EU states copy Israel's 'predictive policing'

Israelis are using social profiling and predictive policing, also known as 'Facebook arrests', to crack down on suspects in Palestinian territories. National authorities in the EU, including the EU's police agency, Europol, are now applying the tactics closer to home.

EU Parliament 'cookie' restrictions worry online media

The European Parliament and groups representing newspapers and magazines are at odds over how new privacy rules will affect the media, especially restrictions on website cookies - but one MEP thinks it could spark new business models.

MEPs ponder how to fight tax havens

After the Paradise Papers brought new revelations about tax dodging across the globe, including in the EU, the European Parliament wonders how to step up the fight.

MEPs point finger at Malta

The European Parliament debated shady deals and rule of law in Malta after the murder of Daphne Caruana Galizia, while the Commission wanted to avoid a "political fight".

Stakeholders' Highlights

  1. UNICEFEuropean Parliament Marks World Children's Day by Launching Dialogue With Children
  2. European Jewish CongressAntisemitism in Europe Today: Is It Still a Threat to Free and Open Society?
  3. Counter BalanceNew Report: Juncker Plan Backs Billions in Fossil Fuels and Carbon-Heavy Infrastructure
  4. Nordic Council of MinistersNordic countries prioritise fossil fuel subsidy reform
  5. Mission of China to the EUNew era for China brings new opportunities to all
  6. ACCASmall and Medium Sized Practices Must 'Offer the Whole Package'
  7. UNICEFAhead of the African Union - EU Summit, Survey Highlights Impact of Conflict on Education
  8. Nordic Council of MinistersNordic Council Calls for Closer Co-Operation on Foreign Policy
  9. Swedish EnterprisesTrilogue Negotiations - Striking the Balance Between Transparency and Efficiency
  10. Access EuropeProspects for US-EU Relations Under the Trump Administration - 28 November 2017
  11. Nordic Council of MinistersSustainable Growth the Nordic Way: Climate Solutions for a Sustainable Future
  12. EU2017EEHow Data Fuels Estonia's Economy

Latest News

  1. Barnier: UK must come up with Ireland solution
  2. Tusk's 'Kremlin' tweet prompts Polish uproar
  3. German coalition talks collapse
  4. Decision day for EU agencies relocation race
  5. EU keeps former Soviet states at arm's length
  6. EU leaders make pledge on social issues after populist backlash
  7. EU agencies and eastern neighbours This WEEK
  8. Germany slams Dutch call for more ambitious EU climate goal