Sunday

10th Dec 2023

The EU-US data deal that isn't

  • The new data agreement is raising serious concerns among privacy groups (Photo: Valentina Pop)

The European Commission is broadly relying on promises from the US authorities that they will protect the fundamental rights of EU citizens on a data transfer deal that has no legal text.

Details of how the new EU US Privacy Shield will work in practice remain vague as threats emerge of a possible legal challenge in the European Court of Justice (ECJ) in Luxembourg.

Read and decide

Join EUobserver today

Become an expert on Europe

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

The deal, announced after two years of talks, replaces a loophole-riddled Safe Harbour agreement that was declared invalid by the EJC last October following media revelations of a US-led global digital dragnet.

Some 4,000 US firms had relied on Safe Harbour for 15 years, with hundreds having made false claims they adhered to the pact.

It will take weeks before the new deal launches, meaning the companies will now have to sign up to other transfer regimes or face possible fines.

The chair of the EU's main privacy regulatory body, the article 29 working party, Isabelle Falque-Pierrotin, told reporters in Brussels on Wednesday (3 February) it was unable to give any preliminary assessment of Privacy Shield.

Deal...what deal?

The regulatory body had given in October the EU and US negotiators a grace period extending to the end of January to finalise a new agreement, against a backdrop of potential "collective enforcement" action against US firms should its deadline be missed.

And while both sides announced the pact on Tuesday (2 February), it remains based on an "exchange of letters" akin to a handshake.

Falque-Pierrotin, who has since backed down on the enforcement threats, said she did not "know exactly what it [Privacy Shield] covers and what is the legal 'bindingness'".

Falque-Pierrotin wants the paperwork on Privacy Shield by the end of February to study its content and legal strength, with a final assessment due sometime at the end of March.

The probe will also determine if other transfer regimes can still be used in light of the new agreement, which are also riddled with problems.

But despite the issues, Falque-Pierrotin said the other transfer regimes could be used "until we have conducted and finalised the assessment of the new arrangement".

EU data regulators say Shield must respond to the wider concerns on the international transfer of personal data raised by the ECJ judgment.

Similar concerns were highlighted by the European Parliament.

British centre-left MEP Claude Moraes, who chairs the civil liberties committee, said the new pact "has too much in common with the previous Safe Harbour decision".

Substandard US laws

Past agreements often saw EU negotiators cave in to US demands on things like granting the Americans access to financial transaction data and allowing them to store airline passenger records for 15 years.

But the EU court's decision gave commission negotiators an added boost in talks and increased the hope amongst data privacy campaigners it would seal a deal that better protected privacy rights.

Despite moves by the US administration to prevent mass surveillance and boost privacy rules, its current laws remain substandard for EU data regulators.

"We still have concerns of the US legal framework", said Falque-Pierrotin.

One of the remaining issues is how to establish clear rules on data processing. Another is how to determine whether US intelligence access to personal data is necessary and proportionate.

She called for independent oversight of US intelligence and the ability for EU citizens to defend their rights.

"These four essential guarantees constitute a kind of European standard," she said.

She noted the new Privacy Shield may alleviate some those concerns but only once a complete analysis has been made by the end of March.

EU and US agree data 'Privacy Shield'

A new transatlantic agreement replaces the Safe Harbour deal with what the Commission says are increased guarantees for the protection of Europeans' personal data.

Orban's sovereignty bill seen as fresh attack on rule of law

Hungary's new sovereignty law has been criticised by the opposition as 'another dark milestone' for the country's democratic values and the rule of law — and it could bring yet another clash between Budapest and Brussels.

Analysis

How Wilders' Dutch extremism goes way beyond Islamophobia

Without losing sight of his pervasive Islamophobia, it is essential to note Geert Wilders' far-right extremism extends to other issues that could drastically alter the nature of Dutch politics — and end its often constructive role in advancing EU policies.

Latest News

  1. How Moldova is trying to control tuberculosis
  2. Many problems to solve in Dubai — honesty about them is good
  3. Sudanese fleeing violence find no haven in Egypt or EU
  4. How should EU reform the humanitarian aid system?
  5. EU suggests visa-bans on Israeli settlers, following US example
  6. EU ministers prepare for all-night fiscal debate
  7. Spain's Nadia Calviño backed to be EIB's first female chief
  8. Is there hope for the EU and eurozone?

Stakeholders' Highlights

  1. Nordic Council of MinistersJoin the Nordic Food Systems Takeover at COP28
  2. Nordic Council of MinistersHow women and men are affected differently by climate policy
  3. Nordic Council of MinistersArtist Jessie Kleemann at Nordic pavilion during UN climate summit COP28
  4. Nordic Council of MinistersCOP28: Gathering Nordic and global experts to put food and health on the agenda
  5. Friedrich Naumann FoundationPoems of Liberty – Call for Submission “Human Rights in Inhume War”: 250€ honorary fee for selected poems
  6. World BankWorld Bank report: How to create a future where the rewards of technology benefit all levels of society?

Stakeholders' Highlights

  1. Georgia Ministry of Foreign AffairsThis autumn Europalia arts festival is all about GEORGIA!
  2. UNOPSFostering health system resilience in fragile and conflict-affected countries
  3. European Citizen's InitiativeThe European Commission launches the ‘ImagineEU’ competition for secondary school students in the EU.
  4. Nordic Council of MinistersThe Nordic Region is stepping up its efforts to reduce food waste
  5. UNOPSUNOPS begins works under EU-funded project to repair schools in Ukraine
  6. Georgia Ministry of Foreign AffairsGeorgia effectively prevents sanctions evasion against Russia – confirm EU, UK, USA

Join EUobserver

Support quality EU news

Join us