Saturday

16th Dec 2017

Opinion

Safe Harbour invalidation puts EU data in quarantine

The decision by the European Court of Justice (ECJ) on 6 October to invalidate the US-EU Safe Harbour Framework is the Smoot-Hawley tariff bill of the digital age.

Smoot-Hawley was the infamous American law in 1930 that hiked US tariffs and precipitated an international tariff war that contributed to the Great Depression.

Thank you for reading EUobserver!

Subscribe now for a 30 day free trial.

  1. €150 per year
  2. or €15 per month
  3. Cancel anytime

EUobserver is an independent, not-for-profit news organization that publishes daily news reports, analysis, and investigations from Brussels and the EU member states. We are an indispensable news source for anyone who wants to know what is going on in the EU.

We are mainly funded by advertising and subscription revenues. As advertising revenues are falling fast, we depend on subscription revenues to support our journalism.

For group, corporate or student subscriptions, please contact us. See also our full Terms of Use.

If you already have an account click here to login.

  • On 6 October the European Court of Justice declared the 15-year-old Safe Harbour data-sharing pact invalid (Photo: *n3wjack's world in pixels)

This is not to suggest that the ECJ itself was motivated by protectionism. The court has a history of strict application of the European Charter of Fundamental Rights and previously invalidated European legislation requiring telecommunications providers to retain data for three years so it can be available for government investigations.

In the Safe Harbour case, the court faulted the European Commission for failing to address US government surveillance even though the 1995 Data Protection Directive and other EU instruments themselves have exceptions for national security.

The impact of the decision, though, amounts to a quarantine of European data, and means the companies that depend on transatlantic data flows might as well be paying tariffs on transfers of data.

This effect is a stark contrast to the announcement on 5 October of a Trans-Pacific Partnership trade agreement among Asian nations and the US.

The nearly 5,000 companies that subscribe to the Safe Harbour framework now need new data transfer mechanisms.  This is not an easy overnight transition.

Separate evaluations of data flows

Unless the EU and US agree on a new framework rapidly, companies will have to evaluate separately the legality of each kind of data flow and choose from a menu that includes new contract provisions, revised privacy policies and business practices, reconfiguring networks, and applying to data protection authorities for approval of organisational rules for data protection and for approval of certain transfers.

They will need to do all of this without impairing service to customers – and with the prospect that many of these solutions will be challenged.

In the days after the decision, literally thousands of lawyers and privacy officers rushed to take part in webinars, seminars, and conference calls, producing hundreds of questions about what to do in response to the court’s decision.

Answering all these questions will take time and money, introducing new friction and costs into transatlantic data flows.

In turn, the data protection authorities that the ECJ has empowered to exercise authority over international transfers will be inundated with new proceedings and requests to approve alternative data transfer mechanisms.

The court has opened the floodgates.

In the meantime, transatlantic data flows have not ceased, putting thousands of companies into a position where they might be accused of non-compliance with European data protection law for doing what until 6 October was lawful.

The Article 29 Working Party, a committee of all EU data protection authorities, have a contentious two-day meeting along with the commission in an effort to prevent 28 or more different ways of treating international transfers of data.

These regulators gave an end-of-January deadline to iron out new mechanisms for transatlantic data transfers, whether these involve various provisions of the existing data protection directive or a new, strengthened Safe Harbour agreement with the United States.

Seize the initiative

This means the Commission cannot temporise over this new framework. The elements of an agreement are in place, and it needs urgently to seize the initiative so that the rules for data transfers are clear and do not lurch back and forth.

In the wake of the ECJ decision, Commission vice-president Timmermans and justice commissioner Jourová acknowledged the importance of maintaining transatlantic data flows, with the latter saying “they are the backbone of our economy.”

Fifty percent of the world’s GDP and about one-third of its trade flows between the United States and Europe.

These trade flows are supported by increasing flows of digital information in many sectors, for transactions, supply chain management, logistics, customer relations and workforce management.

At a time when the US and EU are seeking to reduce impediments to trade, the backbone of the European economy is far too important to be the object of quarantine and virtual tariffs.

Cameron F. Kerry was General Counsel and Acting Secretary of the US Department of Commerce from 2009-2013, and was the chief US interlocutor with the EU on data protection and the Safe Harbour agreement. He is currently Senior Counsel at Sidley Austin LLP

The EU-US data deal that isn't

The lack of any legal documents and content on the new transatlantic data transfer agreement is raising doubts about the deal struck on Tuesday.

EU gives thumbs up to US data pact

Commission gives 'thumbs-up' to controversial Privacy Shield deal with US on data sharing after a year's operation - but notes room for improvement.

EU imposes deadline for new US data pact

The European Commission is using the European Court of Justice ruling on Safe Harbour as a leverage to get a new deal with American authorities.

EU and US agree data 'Privacy Shield'

A new transatlantic agreement replaces the Safe Harbour deal with what the Commission says are increased guarantees for the protection of Europeans' personal data.

Iceland: further from EU membership than ever

With fewer pro-EU MPs in the Iceland parliament than ever before, any plans to resume 'candidate' membership of the bloc are likely to remain on ice, as the country prioritises national sovereignty and a more left-wing path.

News in Brief

  1. EU adopts 'track-and-trace' tobacco system
  2. Luxembourg appeals Amazon tax decision
  3. EU leaders agree to open phase 2 of Brexit talks
  4. Juncker: May made 'big efforts' on Brexit
  5. Merkel took 'tough' line on Russia at EU summit
  6. EU leaders added line supporting 'two-state' solution
  7. EU leaders agree to 20 European Universities by 2024
  8. Belgian courts end legal proceedings against Puigdemont

Stakeholders' Highlights

  1. Dialogue PlatformThe Gülen Community: Who to Believe - Politicians or Actions?" by Thomas Michel
  2. Plastics Recyclers Europe65% plastics recycling rate attainable by 2025 new study shows
  3. European Heart NetworkCommissioner Andriukaitis' Address to EHN on the Occasion of Its 25th Anniversary
  4. ACCACFOs Risk Losing Relevance If They Do Not Embrace Technology
  5. UNICEFMake the Digital World Safer for Children & Increase Access for the Most Disadvantaged
  6. European Jewish CongressWelcomes Recognition of Jerusalem as the Capital of Israel and Calls on EU States to Follow Suit
  7. Mission of China to the EUChina and EU Boost Innovation Cooperation Under Horizon 2020
  8. European Gaming & Betting AssociationJuncker’s "Political" Commission Leaves Gambling Reforms to the Court
  9. AJC Transatlantic InstituteAJC Applauds U.S. Recognition of Jerusalem as Israel’s Capital City
  10. EU2017EEEU Telecom Ministers Reached an Agreement on the 5G Roadmap
  11. European Friends of ArmeniaEU-Armenia Relations in the CEPA Era: What's Next?
  12. Mission of China to the EU16+1 Cooperation Injects New Vigour Into China-EU Ties

Latest News

  1. Catalonia, Brexit, and Uber on EU agenda This WEEK
  2. Macron and Merkel take tough line on Poland
  3. Eurozone future needs structural reforms, EU leaders told
  4. Showdown EU vote on asylum looking likely for next June
  5. EU stresses unity as it launches next phase of Brexit talks
  6. Polish PM ready for EU sanctions scrap
  7. Dutchman to lead powerful euro working group
  8. EU mulls post-Brexit balance of euro and non-eurozone states

Stakeholders' Highlights

  1. EPSUEU Blacklist of Tax Havens Is a Sham
  2. EU2017EERole of Culture in Building Cohesive Societies in Europe
  3. ILGA EuropeCongratulations to Austria - Court Overturns Barriers to Equal Marriage
  4. Centre Maurits CoppietersCelebrating Diversity, Citizenship and the European Project With Fundació Josep Irla
  5. European Healthy Lifestyle AllianceUnderstanding the Social Consequences of Obesity
  6. Union for the MediterraneanMediterranean Countries Commit to Strengthening Women's Role in Region
  7. Bio-Based IndustriesRegistration for BBI JU Stakeholder Forum about to close. Last chance to register!
  8. European Heart NetworkThe Time Is Ripe for Simplified Front-Of-Pack Nutrition Labelling
  9. Counter BalanceNew EU External Investment Plan Risks Sidelining Development Objectives
  10. EU2017EEEAS Calls for Eastern Partnership Countries to Enter EU Market Through Estonia
  11. Dialogue PlatformThe Turkey I No Longer Know
  12. World Vision7 Million Children at Risk in the DRC: Donor Meeting to Focus on Saving More Lives