Thursday

30th Nov 2023

EU to adopt new US data rules in July

  • EU commission is set to roll out its updated draft version of Privacy Shield (Photo: Matthew Klein)

The European Commission is set to present a new draft of its data-exchange pact with the US, the Privacy Shield, in early July.

EU justice commissioner Vera Jourova told EUobserver in a recent interview that the most contentious issues had been agreed by Washington and Brussels.

Read and decide

Join EUobserver today

Become an expert on Europe

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

These concerned access to data by US security services, bulk collection of people’s personal information and independent oversight.

“We reached an accord on more precise listing of cases when bulk collection can occur and a better definition of how our American partners understand the difference between bulk collection which may be justified and mass surveillance without any purpose, which is not tolerable”, she said.

“These specific points have already been finished and put down in written form”.

The shield is to replace the 15 year-old Safe Harbour pact that failed to protect the privacy of EU nationals whose data was transferred to firms, such as Facebook, based in the US.

The EU Court of Justice (ECJ) invalidated the harbour treaty last year, due in part, to revelations by Edward Snowden, a former US intelligence contractor, of mass-scale US snooping on Europeans.

The EU commission and the US, after two years of talks, proposed the shield treaty as a replacement earlier this year.

But the EU's main regulatory body on privacy, the Article 29 Data Protection Working Party, criticised the initial draft in the strongest possible terms.

The body is composed of EU states’ national data supervisors and EU officials.

Isabelle Falque-Pierrotin, its chair, said in April that the shield would fail to protect people's data.

“The possibility that is left in the shield and its annexes for bulk collection … is not acceptable," she said.

She sent the draft back to the EU commission, which is now set to present its updated version.

Big money

The issue is important because big and small companies that use data on both sides of the Atlantic have had to use more costly and more complicated data exchange frameworks ever since Safe Harbour’s demise.

A lot of money is involved. The data flows are worth an estimated €230 billion a year.

Broader concerns on how well the new “shield” would stand up to ECJ scrutiny have also put companies on edge.

Giovanni Buttarelli, the European data protection supervisor (EDPS), told reporters in May he too had "serious concerns" with Privacy Shield.

But Jourova remained confident.

Aside from having narrowed down on US bulk collection, she said she had also tackled the problem of oversight.

The US has promised to set up a special ombudsman, embedded in the state department, to help deal with complaints from EU nationals.

But doubts emerged over the independence of the new office.

Jourova told this website that "a more precise definition of competencies, status, and functioning" of the ombudsman have since been agreed.

Not everything is ready, however.

Jourova said the EU and US still need to agree on how long firms can retain the data and for what purpose.

"We want to make sure that personal data will only be kept for that period which is necessary and to agree on exceptions which enable them to keep data for a longer time," she said.

Exceptions in the EU include retaining data for scientific research purposes or for healthcare needs.

“In the US they have a broader, a more benevolent system [on retention], and everything that we do on Privacy Shield is to make sure that there’ll be equivalent, not the same, but equivalent, protection [for EU and US nationals]”, she said.

EU data regulation

The EU commission said the Privacy Shield would become operational almost immediately after it is adopted by the college of EU commissioners in July, with no further input from the EU Council or MEPs.

Around a year later, the EU's reformed data protection regulation should also be implemented.

The regulation is much tougher when it comes to privacy controls and companies will have to comply with it or face big fines.

The difference between the two hinges on how a company uses data.

Data sent to a company in the US would fall under the Privacy Shield. But if the same company also offers goods and services in the EU and collects EU nationals’ data remotely, then it will have to comply with the EU regulation as well.

Orban's sovereignty bill seen as fresh attack on rule of law

Hungary's new sovereignty law has been criticised by the opposition as 'another dark milestone' for the country's democratic values and the rule of law — and it could bring yet another clash between Budapest and Brussels.

Analysis

How Wilders' Dutch extremism goes way beyond Islamophobia

Without losing sight of his pervasive Islamophobia, it is essential to note Geert Wilders' far-right extremism extends to other issues that could drastically alter the nature of Dutch politics — and end its often constructive role in advancing EU policies.

Latest News

  1. What are the big money debates at COP28 UN climate summit?
  2. 'Pay or okay?' — Facebook & Instagram vs the EU
  3. EU offers Turkey upgrade, as Sweden nears Nato entry
  4. Russia loses seat on board of chemical weapons watchdog
  5. Finland's closure of Russia border likely violates asylum law
  6. The EU's 'no added sugars' fruit-juice label sleight-of-hand
  7. EU belittles Russia's Lavrov on way to Skopje talks
  8. Member states stall on EU ban on forced-labour products

Stakeholders' Highlights

  1. Nordic Council of MinistersArtist Jessie Kleemann at Nordic pavilion during UN climate summit COP28
  2. Nordic Council of MinistersCOP28: Gathering Nordic and global experts to put food and health on the agenda
  3. Friedrich Naumann FoundationPoems of Liberty – Call for Submission “Human Rights in Inhume War”: 250€ honorary fee for selected poems
  4. World BankWorld Bank report: How to create a future where the rewards of technology benefit all levels of society?
  5. Georgia Ministry of Foreign AffairsThis autumn Europalia arts festival is all about GEORGIA!
  6. UNOPSFostering health system resilience in fragile and conflict-affected countries

Stakeholders' Highlights

  1. European Citizen's InitiativeThe European Commission launches the ‘ImagineEU’ competition for secondary school students in the EU.
  2. Nordic Council of MinistersThe Nordic Region is stepping up its efforts to reduce food waste
  3. UNOPSUNOPS begins works under EU-funded project to repair schools in Ukraine
  4. Georgia Ministry of Foreign AffairsGeorgia effectively prevents sanctions evasion against Russia – confirm EU, UK, USA
  5. Nordic Council of MinistersGlobal interest in the new Nordic Nutrition Recommendations – here are the speakers for the launch
  6. Nordic Council of Ministers20 June: Launch of the new Nordic Nutrition Recommendations

Join EUobserver

Support quality EU news

Join us