Categories: CloudDatacentre

EU Watchdog: EU-US Privacy Shield Is ‘Not Robust Enough’

A European data protection watchdog has said that the recently published EU-US Privacy Shield agreement needs “significant improvements”, suggesting the deal had been put into place hurriedly and would not hold up to future legal scrutiny.

“It’s time to develop a longer-term solution in the transatlantic dialogue,” said Giovanni Buttarelli, the European data protection supervisor (EDPS), in an official opinion.

Safe Harbour 2.0

The EU-US Privacy Shield, announced in February, is intended to replace a previous agreement known as Safe Harbour that had been in place since 2000.

That deal was revoked in October of last year by the European Court of Justice (ECJ) amid concerns that US intelligence agencies were routinely conducting mass data collection on EU citizens via data held by US companies and transferred under the terms of Safe Harbour.

Buttarelli argued the new agreement would be unlikely to withstand similar legal challenges.

“The Privacy Shield as it stands is not robust enough to withstand future legal scrutiny before the Court,” he stated. “Significant improvements are needed… to respect the essence of key data protection principles with particular regard to necessity, proportionality and redress mechanisms.”

EU law prohibits companies operating in the region to transfer data to countries that don’t provide data protections equivalent to those in Europe.

Privacy protections

The Privacy Shield is intended to create such equivalence in practice by introducing an ombudsman in the US to handle complaints from EU citizens and written commitments from US intelligence authorities protecting Europeans’ data from mass surveillance.

The deal also involves an annual assessment designed to address any problems that may have arisen.

But Butarelli pointed out that tougher data-protection rules are coming into effect in Europe under the General Data Protection Regulation (GDPR) and argued the Privacy Shield would be unable to withstand challenges under those statutes, adding that legislators should “take their time in finding an adequate, long-term solution”.

The EDPS’ comments mirror concerns about the EU-US Privacy Shield expressed in an April opinion by the Article 29 Working Party on data protection, to which the EDPS contributed as a member.

The deal is due to be ratified in June.

How much do you know about the cloud? Try our quiz!

Matthew Broersma

Matt Broersma is a long standing tech freelance, who has worked for Ziff-Davis, ZDnet and other leading publications

Recent Posts

OpenAI, Broadcom In Talks Over Development Of AI Chip – Report

Rebelling against Nividia? OpenAI is again reportedly exploring the possibility of developing its own AI…

18 hours ago

Microsoft Outage Impacts Airlines, Media, Banks & Businesses Globally

IT outage causes major disruptions around the world, after Crowdstrike update allegedly triggers Microsoft outages

21 hours ago

GenAI Integration Efforts Hampered By Costs, SnapLogic Finds

Hefty investment. SnapLogic research finds UK businesses are setting aside three-quarters of their IT budgets…

2 days ago

Meta Refuses EU Release Of Multimodal Llama AI Model

Mark Zuckerberg firm says European regulatory environment too ‘unpredictable’, so will not release multimodal Llama…

2 days ago

Synchron Announces Brain Interface Chat Powered by OpenAI

Brain implant firm Synchron offers AI-driven emotion and language predictions for users, powered by OpenAI's…

2 days ago