Friday

28th Feb 2020

Will US privacy-lite hollow out GDPR?

  • Despite their different approaches, the EU and the US have an agreement to share personal data for commercial purposes, known as 'Privacy Shield' (Photo: Josh Hallett)

Over 90 percent of the data on the internet has been created since 2016. Yet, the amount of personal information online is expected to grow exponentially in the next years.

As a result, data protection and privacy rules have either been introduced or are being considered in many countries across the world.

Read and decide

Join EUobserver today

Support quality EU news

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or join as a group

The European Union's General Data Protection Regulation (GDPR), which entered into force in 2018, introduced pioneering legislation that set data privacy standards for millions of citizens in the EU and beyond.

Some say that GDPR is currently the most developed data protection law in the world, but the United States (US) has opted for a very different approach.

The American National Institute of Standards and Technology (NIST) recently released (16 January) the long-awaited Privacy Framework, which is not a law or regulation, but rather a "voluntary tool".

This framework aims to help organisations manage privacy risks and technical capabilities to comply with laws that may affect them, but also helps industries to communicate from the executive to the implementation level about privacy practices, aiming to increase consumers' trust.

"I think about it as building foundational blocks for privacy that anybody [small and big enterprises] can use to meet their obligations and manage their privacy risks," the senior policy adviser and leader for the Privacy Framework at NIST, Naomi Lefkovitz, told journalists in Brussels.

This model, basically focussed on privacy risk management, is "very flexible" so it could also be adopted in Europe complementing existing EU law, she said.

"We look at privacy risks from embarrassment to discrimination as a result of data processing, [and] these are the same issues that Europe is looking at," Lefkovitz said.

"But there is no one right answer when it comes to privacy," she added.

The European rules on data privacy have contributed to the development of the US Privacy Framework, according to Lefkovitz, who hopes that this voluntary tool "can return the favour" to achieve more effective solutions within the GDPR.

The EU-US Privacy Shield

Despite their different approaches, the EU and the US have an agreement to share personal data for commercial purposes, under certain conditions, since the EU-US 'privacy shield' framework was adopted in 2016.

But this deal has repeatedly received criticism from civil society and MEPs, who believe that European citizens' rights might be not fully protected.

In June 2018, the European Parliament's civil liberties committee (Libe) called on the European Commission to suspend the EU-US data transfer pact - something that might happen due to the "Schrems II" ongoing case before the European Court of Justice.

However, after the commission gave the green light to the agreement in its third annual review last October, some members of the committee remain sceptical.

"The EU-US 'privacy shield' is inadequate as a safeguard, badly implemented, hardly enforced and weakly scrutinised," Dutch liberal MEP Sophie in 't Veld said earlier this month.

"This is not the way that we can protect our citizens. This [agreement] does not even take the EU seriously. We make laws, then we negotiate with the US and we give it all away," she told MEPs from Libe.

According to the international NGO Access Now, "the EU does not only enable the continuous violation of fundamental rights under this arrangement, but it is also undermining its global leadership role on the protection of personal data".

MEPs from the Libe committee will be travelling to the US from 23 to 29 February to discuss EU-US justice and home affairs, including the privacy shield framework.

Privacy Shield less relevant given GDPR, says data chief

Giovanni Buttarelli, the European data protection supervisor, says the EU-US data sharing pact known as Privacy Shield will play an increasingly minor role given the general data protection regulation.

GDPR - a global 'gold standard'?

The new EU privacy rules are touted as a global 'gold standard' - but Mexico's former data commissioner warns some nations are far from ready.

EU backtracks on plans to ban facial recognition

The European Commission came under fire on Wednesday for ruling out a moratorium on facial recognition. Instead, it proposed a public debate with stakeholders to determine when this technology might be used.

Zuckerberg lobbies Brussels ahead of new EU rules

Facebook CEO Mark Zuckerberg met on Monday three European commissioners in charge of digital policies - Thierry Breton, Margrethe Vestager and Vera Jourová - to discuss upcoming EU rules and the responsibilities of platforms regarding disinformation.

Analysis

EU plan on AI: new rules, better taxes

The bloc wants to become a global leader in innovation in the data economy and AI. However, proportional legislation, better data-availability and huge invesment will be needed across the EU to compete with China and the US.

MEPs urge binding rules for common chargers by July

MEPs demanded the European Commission ensure immediate EU regulatory action on common chargers for all mobile devices by July, enabling users to easily re-use old devices and reducing e-waste.

Online platforms need regulating, Jourova warns

The EU commission vice-president pledged to tackle disinformation by regulating platforms and cleaning up online political advertising rules. She also pointed to Russia and China as wanting to undermine European democracy.

Stakeholders' Highlights

  1. Nordic Council of MinistersScottish parliament seeks closer collaboration with the Nordic Council
  2. UNESDAFrom Linear to Circular – check out UNESDA's new blog
  3. Nordic Council of Ministers40 years of experience have proven its point: Sustainable financing actually works
  4. Nordic Council of MinistersNordic and Baltic ministers paving the way for 5G in the region
  5. Nordic Council of MinistersEarmarked paternity leave – an effective way to change norms
  6. Nordic Council of MinistersNordic Climate Action Weeks in December

Latest News

  1. WHO on coronavirus in Europe: 'be prepared'
  2. Frontex hits activist pair with €24,000 legal bill
  3. Turkish jets keep violating Greek airspace
  4. 'Fragmented' Slovakia goes to polls amid corruption woes
  5. EU development policy needs a fresh start
  6. EU critical of China on Swedish dissident publisher
  7. NGOs urge EU to tackle meat consumption 'problem'
  8. Coronavirus: voices from a quarantined Italian town

Join EUobserver

Support quality EU news

Join us