Tuesday

19th Mar 2024

Will US privacy-lite hollow out GDPR?

  • Despite their different approaches, the EU and the US have an agreement to share personal data for commercial purposes, known as 'Privacy Shield' (Photo: Josh Hallett)

Over 90 percent of the data on the internet has been created since 2016. Yet, the amount of personal information online is expected to grow exponentially in the next years.

As a result, data protection and privacy rules have either been introduced or are being considered in many countries across the world.

Read and decide

Join EUobserver today

Get the EU news that really matters

Instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

The European Union's General Data Protection Regulation (GDPR), which entered into force in 2018, introduced pioneering legislation that set data privacy standards for millions of citizens in the EU and beyond.

Some say that GDPR is currently the most developed data protection law in the world, but the United States (US) has opted for a very different approach.

The American National Institute of Standards and Technology (NIST) recently released (16 January) the long-awaited Privacy Framework, which is not a law or regulation, but rather a "voluntary tool".

This framework aims to help organisations manage privacy risks and technical capabilities to comply with laws that may affect them, but also helps industries to communicate from the executive to the implementation level about privacy practices, aiming to increase consumers' trust.

"I think about it as building foundational blocks for privacy that anybody [small and big enterprises] can use to meet their obligations and manage their privacy risks," the senior policy adviser and leader for the Privacy Framework at NIST, Naomi Lefkovitz, told journalists in Brussels.

This model, basically focussed on privacy risk management, is "very flexible" so it could also be adopted in Europe complementing existing EU law, she said.

"We look at privacy risks from embarrassment to discrimination as a result of data processing, [and] these are the same issues that Europe is looking at," Lefkovitz said.

"But there is no one right answer when it comes to privacy," she added.

The European rules on data privacy have contributed to the development of the US Privacy Framework, according to Lefkovitz, who hopes that this voluntary tool "can return the favour" to achieve more effective solutions within the GDPR.

The EU-US Privacy Shield

Despite their different approaches, the EU and the US have an agreement to share personal data for commercial purposes, under certain conditions, since the EU-US 'privacy shield' framework was adopted in 2016.

But this deal has repeatedly received criticism from civil society and MEPs, who believe that European citizens' rights might be not fully protected.

In June 2018, the European Parliament's civil liberties committee (Libe) called on the European Commission to suspend the EU-US data transfer pact - something that might happen due to the "Schrems II" ongoing case before the European Court of Justice.

However, after the commission gave the green light to the agreement in its third annual review last October, some members of the committee remain sceptical.

"The EU-US 'privacy shield' is inadequate as a safeguard, badly implemented, hardly enforced and weakly scrutinised," Dutch liberal MEP Sophie in 't Veld said earlier this month.

"This is not the way that we can protect our citizens. This [agreement] does not even take the EU seriously. We make laws, then we negotiate with the US and we give it all away," she told MEPs from Libe.

According to the international NGO Access Now, "the EU does not only enable the continuous violation of fundamental rights under this arrangement, but it is also undermining its global leadership role on the protection of personal data".

MEPs from the Libe committee will be travelling to the US from 23 to 29 February to discuss EU-US justice and home affairs, including the privacy shield framework.

Privacy Shield less relevant given GDPR, says data chief

Giovanni Buttarelli, the European data protection supervisor, says the EU-US data sharing pact known as Privacy Shield will play an increasingly minor role given the general data protection regulation.

GDPR - a global 'gold standard'?

The new EU privacy rules are touted as a global 'gold standard' - but Mexico's former data commissioner warns some nations are far from ready.

Interview

2013: Snowden was 'wake-up call' for GDPR

The contentious negotiations on the EU's data protection rules (GDPR), very much influenced by intense lobbying from the US, radically changed after whistleblower Edward Snowden revealed in 2013 that US intelligence services were collecting worldwide user-data.

MEPs: 'Mass surveillance' still possible under US privacy deal

A delegation of MEPs from the civil liberties committee have warned of the remaining "deficiencies" of the EU-US 'privacy shield' framework, amid concerns over the efficiency of this mechanism to protect EU citizens' fundamental rights.

Opinion

Why are the banking lobby afraid of a digital euro?

Europeans deserve a digital euro that transcends the narrow interests of the banking lobby and embodies the promise of a fairer and more competitive monetary and financial landscape.

Latest News

  1. Borrell: 'Israel provoking famine', urges more aid access
  2. Europol: Israel-Gaza galvanising Jihadist recruitment in Europe
  3. EU to agree Israeli-settler blacklist, Borrell says
  4. EU ministers keen to use Russian profits for Ukraine ammo
  5. Call to change EIB defence spending rules hits scepticism
  6. Potential legal avenues to prosecute Navalny's killers
  7. EU summit, Gaza, Ukraine, reforms in focus this WEEK
  8. The present and future dystopia of political micro-targeting ads

Stakeholders' Highlights

  1. Nordic Council of MinistersJoin the Nordic Food Systems Takeover at COP28
  2. Nordic Council of MinistersHow women and men are affected differently by climate policy
  3. Nordic Council of MinistersArtist Jessie Kleemann at Nordic pavilion during UN climate summit COP28
  4. Nordic Council of MinistersCOP28: Gathering Nordic and global experts to put food and health on the agenda
  5. Friedrich Naumann FoundationPoems of Liberty – Call for Submission “Human Rights in Inhume War”: 250€ honorary fee for selected poems
  6. World BankWorld Bank report: How to create a future where the rewards of technology benefit all levels of society?

Stakeholders' Highlights

  1. Georgia Ministry of Foreign AffairsThis autumn Europalia arts festival is all about GEORGIA!
  2. UNOPSFostering health system resilience in fragile and conflict-affected countries
  3. European Citizen's InitiativeThe European Commission launches the ‘ImagineEU’ competition for secondary school students in the EU.
  4. Nordic Council of MinistersThe Nordic Region is stepping up its efforts to reduce food waste
  5. UNOPSUNOPS begins works under EU-funded project to repair schools in Ukraine
  6. Georgia Ministry of Foreign AffairsGeorgia effectively prevents sanctions evasion against Russia – confirm EU, UK, USA

Join EUobserver

EU news that matters

Join us