EU-U.S. Privacy Shield: Third review welcomes progress while identifying steps for improvement

privacy shield

(Credit: European Union)

This article is brought to you in association with the European Commission.


Today the European Commission publishes its report on the third annual review of the functioning of the EU-U.S. Privacy Shield. The report confirms that the U.S. continues to ensure an adequate level of protection for personal data transferred under the Privacy Shield from the EU to participating companies in the U.S. Since the second annual review, there have been a number of improvements in the functioning of the framework, as well as appointments to key oversight and redress bodies, such as the Privacy Shield Ombudsperson. Being in the third year of the Shield’s operation, the review focused on the lessons learnt from its practical implementation and day-to-day functionality. Today there are about 5,000 companies participating in this EU-U.S. data protection framework.

Commissioner for Justice, Consumers and Gender Equality, Věra Jourová, stated: “With around 5,000 participating companies, the Privacy Shield has become a success story. The annual review is an important health check for its functioning. We will continue the digital diplomacy dialogue with our U.S. counterparts to make the Shield stronger, including when it comes to oversight, enforcement and, in a longer-term, to increase convergence of our systems.”

Among the improvements, the third review notes that the U.S. Department of Commerce is ensuring the necessary oversight in a more systematic manner by, for example, carrying out monthly checks of a sample of companies to verify compliance with Privacy Shield principles.

Enforcement action has improved with the Federal Trade Commission taking enforcement action related to the Privacy Shield in seven cases.

An increasing number of EU individuals are making use of their rights under the Privacy Shield and the relevant redress mechanisms are functioning well.

In addition to the appointment of the permanent Ombudsperson, the final two vacancies on the Privacy and Civil Liberties Oversight Board have been filled, ensuring that it is fully-staffed for the first time since 2016.

However, the Commission recommends that certain concrete steps be taken to better ensure the effective functioning of the Privacy Shield in practice. This includes further strengthening the (re)certification process for companies who want to participate by shortening the time of the (re)certification process; expanding compliance checks, including concerning false claims of participation in the framework; and developing additional guidance for companies related to human resources data. The Commission also expects the Federal Trade Commission to further step up its investigations into compliance with substantive requirements of the Privacy Shield and provide the Commission and the EU data protection authorities with information on ongoing investigations.

Background

The EU-U.S. Privacy Shield decision was adopted on 12 July 2016 and the Privacy Shield framework became operational on 1 August 2016. It protects the fundamental rights of anyone in the EU whose personal data is transferred to certified companies in the United States for commercial purposes and brings legal clarity for businesses relying on transatlantic data transfers.

The Commission committed to reviewing the arrangement on an annual basis, to assess if it continues to ensure an adequate level of protection for personal data. The first and second annual review took place in September 2017 and October 2018, respectively.

On 12 September 2019, the Director-General for Justice, Consumers and Gender Equality, Tiina Astola, and the U.S. Secretary of Commerce, Wilbur Ross, launched the discussions for the third review of the EU-U.S. Privacy Shield (statement). The findings in this report are based on meetings with representatives of all U.S. government departments in charge of running the Privacy Shield, including the Department of Commerce, the Federal Trade Commission, the Office of the Director of National Intelligence and the Department of Justice, which took place in Washington in September 2019, as well as on input from a wide range of stakeholders, including feedback from companies and privacy NGOs. Representatives of the EU’s independent data protection authorities also participated in the review. There is currently litigation pending before the Court of Justice of the European Union on EU-U.S. data transfers, which may also have an impact on the Privacy Shield. A hearing took place in July 2019 in case C-311/18 (Schrems II) and, once the Court’s judgement is issued, the Commission will assess its consequences for the Privacy Shield.

Advertising

the sting Milestone

Featured Stings

Can we feed everyone without unleashing disaster? Read on

These campaigners want to give a quarter of the UK back to nature

How to build a more resilient and inclusive global system

Stopping antimicrobial resistance would cost just USD 2 per person a year

Landmark terror finance resolution adopted by Security Council

This AI trash can is designed to stop you wasting food

How climate change sparks innovation for fragile communities

UK voters sent strong message to May and Corbyn for soft Brexit

This robot boat delivered a box of oysters in a breakthrough for unmanned shipping

The cost of generating renewable energy has fallen – a lot

Populist Eurosceptics helped by Trumpists seriously threaten the EU edifice

How AI is shaping financial services

Killing of aid worker in Syria part of ‘disturbing trend’

European Employment Forum 2013 and not European Unemployment Forum 2014

Environment Committee MEPs push for cleaner trucks and electric buses

A Sting Exclusive: EU Commissioner Mimica looks at how the private sector can better deliver for international development

To my Chinese friend

Nuclear weapons in Lithuania: defence against Russia or target for terrorists?

General Assembly officially adopts roadmap for migrants to improve safety, ease suffering

Investing in health workers yields ‘triple dividend’, WHO chief says in New Year’s message

Global public-private collaboration tackles cybersecurity skills gap

Ferry capsizes near Mosul, UN chief offers solidarity, support ‘as needed’

‘Once-in-a-generation opportunity’ will be squandered, warns Guterres, unless social, economic, environmental challenges are met

UN mission in DR Congo appeals for calm as violent protests continue

In wake of ‘collapsed’ agreement, new wave of violence threatens millions in Syria’s Idlib

Monday’s Daily Brief: Independent UN experts on Myanmar, UN chief renounces attacks in US, Libyan airport violence, UN spokesperson on Kashmir, and FAO and Italy on development

Eurozone: Bankers-politicians rig keeps robbing taxpayers

China dazzles the world with her Silk Road plan to connect, Asia, Europe and Africa

Parliament: No consent to EU budget until €11.2 billion unpaid bills are settled

UN General Assembly urges greater protection for Palestinians, deplores Israel’s ‘excessive’ use of force

Rohingya refugee shelters ‘washed away’ in Bangladesh monsoon rains: UN agency

MEPs oppose EU Commission plans to authorise three herbicide-resistant GMOs

EP leaders call for negotiations on upgraded Transparency Register to continue

Giving humanitarian help to migrants should not be a crime, according to the EP

European Commission requests that Italy presents a revised draft budgetary plan for 2019

Why global collaboration is needed to protect against a new generation of cyber threats

$683 million appeal to deliver reproductive health services, where they’re most needed

Burkina Faso: Dozens killed in clashes, UN chief condemns attacks

Global aid needed for healthcare

Cultural Intelligence: the importance of changing perspectives

Advancing multilateralism goes ‘hand-in-hand’ with work of the UN

‘Champion for multilateralism’ readies to hand over UN General Assembly gavel

UN pushes for universal health care on International Day

Global initiative launched to keep top sports events safe from terrorism

EU Commission: Growth first then fiscal consolidation

The ‘American Dream’ can be best achieved in the Nordic nations, says Finland’s PM

France: New labour laws for more competitiveness

The dirty secret of electric vehicles

EU-UK: A deal synonymous to ‘remain’, England pays the Irish price

Boris Johnson’s no-deal Brexit to differ when issued from 10 Downing St.

UN Climate Action Summit concludes with insufficient EU and global pledges

Encryption is under attack. Here’s why that matters

An all-out fight for the EU budget

What if nature became a legal person?

UN atomic watchdog chief updates governing body on key North Korean reactor

How biotechnology is evolving in the Fourth Industrial Revolution

New Disability Inclusion Strategy is ‘transformative change we need’, says Guterres

An economist explains why women are paid less

UN Envoy ‘confident’ deal can be reached to avert further violence around key Yemeni port city

EU to lead one more fight against climate change at G7 summit

EU to negotiate an FTA with Japan

With science ‘held back by a gender gap’, Guterres calls for more empowerment for women and girls

A conceptual approach to Violence Against Healthcare in Turkey from SDG’s

International Women’s Day 2019: more equality, but change is too slow

More Stings?

Advertising

Speak your Mind Here

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s