Friday

23rd Feb 2024

Regulator criticises 'Privacy Shield' for EU data in US

  • The new EU-US Privacy Shield may end up at the European Court of Justice in Luxembourg (Photo: europarl.europa.eu)

The European Commission plans to move forward on a new data sharing pact with the US despite criticism by Europe's top data protection regulators on Wednesday (13 April).

EU justice commissioner Vera Jourva said the so-called EU-US Privacy Shield, which was agreed in February, will be adopted in June.

Read and decide

Join EUobserver today

Get the EU news that really matters

Instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

"I am grateful to the experts [data regulators] for their thorough analysis," she said in statement.

The move to push ahead with Privacy Shield is motivated, in part, to reestablish a sense of lost trust among businesses that rely on a transatlantic data exchange market worth $260 billion annually.

Privacy Shield lays out rules on the transfer and use of data of EU nationals by firms in the United States and replaces a 15-year old Safe Harbour decision that was declared illegal by the European Court of Justice (ECJ).

The latest deal, largely based on signed letters from US authorities, is supposed to protect EU nationals from mass surveillance and other possible violations.

But details in the annex of the agreement still give US authorities wide discretion on bulk collection.

US-led mass surveillance, as revealed by whistleblower Edward Snowden, was among the main reasons why Safe Harbour ended up in the ECJ in the first place.

Concern is mounting that Privacy Shield could share a similar fate, unravelling two years of talks between the EU commission and the US.

The EU's main regulatory body on privacy, the “article 29 working party”, on Wednesday added to those fears after its assessment flagged gaps.

The article 29 group is composed of representatives of national data protection authorities and EU experts.

It cited improvements to Safe Harbour, but its chair, Isabelle Falque-Pierrotin, said “the possibility that is left in the Shield and its annexes for bulk collection … is not acceptable.”

In a separate case at the EU court in Luxembourg, judges are to rule by 2017 on whether UK proposals on bulk data retention and bulk access to retained data are lawful.

Falque-Pierrotin said the verdict is likely to weigh in on Privacy Shield.

The US has promised to set up a special ombudsperson, embedded in the state department, to help deal with complaints from EU nationals.

But Falque-Pierrotin said there are outstanding issues on the ombudsperson's independence.

"We don't have enough security guarantees in the status of the ombudsperson," she said.

Article 29's criticism was not limited to US national security issues.

In terms of commercial use of data, it said questions remain on use of EU nationals’ data in the US and on the transfer of their data to other countries.

The Brussels-based European Consumer Organisation (BEUC) aired similar views.

“EU consumers’ rights to privacy should not expire once their personal data travels outside the EU but this agreement does nothing to really prevent that from happening," said BEUC director Monique Goyens.

In a further complication, the legal analysis of Shield is based, in part, on a 20-year old data protection directive that is set to be replaced this week by a much stronger regulation.

The reformed data protection regulation will be voted into law by the European Parliament in Strasbourg on Thursday and transposed into national laws within two years.

It is unclear how well Privacy Shield will respond to the new data protection regulation.

The regulation will be voted in alongside a new EU passenger name record (PNR) bill that has itself attracted widespread criticism from civil liberty defenders.

Cracks emerge in EU US data 'shield'

Issues of mass surveillance and a weak legal basis on a new data privacy deal with the US is casting doubt on its viability should it end up before the European Court of Justice in Luxembourg.

EU to adopt new US data rules in July

Talks on Privacy Shield have agreed key issues - on US security access, bulk collection and oversight - EU commissioner Jourova told EUobserver. Questions on data retention outstanding.

Watchdogs concerned by EU-US data pact

European data protection authorities tell US to improve oversight on 'Privacy Shield' scheme, otherwise they would go to the EU's highest court.

Opinion

2024 will be a momentous year for election observers

Our role is not to 'judge' the elections, but observation does provide an additional level of transparency, scrutiny and public accountability, writes Matteo Mecacci, director of the OSCE Office for Democratic Institutions and Human Rights (ODIHR).

Poland awaits EU-funds approval as Reynders visits Warsaw

Restoring the rule of law in Poland to unlock EU funds after the Law and Justice era marks a major challenge for Donald Tusk's new government, as EU justice commissioner Didier Reynders will see during a Warsaw visit on Friday

Latest News

  1. Energy and minerals disputes overshadow new EU-ACP pact
  2. Germany speeds up Georgia and Morocco asylum returns
  3. How Amazon lobbyists could be banned from EU Parliament
  4. Blackmailing the Global South on EU carbon border tax won't work
  5. EU auditors: rule-of-law budget protections only partial success
  6. EU's €723bn Covid recovery fund saw growth, but doubts remain
  7. Von der Leyen rejects extremist parties, leaves door open to ECR
  8. Russian oligarchs failed to get off EU blacklist

Stakeholders' Highlights

  1. Nordic Council of MinistersJoin the Nordic Food Systems Takeover at COP28
  2. Nordic Council of MinistersHow women and men are affected differently by climate policy
  3. Nordic Council of MinistersArtist Jessie Kleemann at Nordic pavilion during UN climate summit COP28
  4. Nordic Council of MinistersCOP28: Gathering Nordic and global experts to put food and health on the agenda
  5. Friedrich Naumann FoundationPoems of Liberty – Call for Submission “Human Rights in Inhume War”: 250€ honorary fee for selected poems
  6. World BankWorld Bank report: How to create a future where the rewards of technology benefit all levels of society?

Stakeholders' Highlights

  1. Georgia Ministry of Foreign AffairsThis autumn Europalia arts festival is all about GEORGIA!
  2. UNOPSFostering health system resilience in fragile and conflict-affected countries
  3. European Citizen's InitiativeThe European Commission launches the ‘ImagineEU’ competition for secondary school students in the EU.
  4. Nordic Council of MinistersThe Nordic Region is stepping up its efforts to reduce food waste
  5. UNOPSUNOPS begins works under EU-funded project to repair schools in Ukraine
  6. Georgia Ministry of Foreign AffairsGeorgia effectively prevents sanctions evasion against Russia – confirm EU, UK, USA

Join EUobserver

EU news that matters

Join us