EU-U.S. Privacy Shield: Third review welcomes progress while identifying steps for improvement

privacy shield

(Credit: European Union)

This article is brought to you in association with the European Commission.


Today the European Commission publishes its report on the third annual review of the functioning of the EU-U.S. Privacy Shield. The report confirms that the U.S. continues to ensure an adequate level of protection for personal data transferred under the Privacy Shield from the EU to participating companies in the U.S. Since the second annual review, there have been a number of improvements in the functioning of the framework, as well as appointments to key oversight and redress bodies, such as the Privacy Shield Ombudsperson. Being in the third year of the Shield’s operation, the review focused on the lessons learnt from its practical implementation and day-to-day functionality. Today there are about 5,000 companies participating in this EU-U.S. data protection framework.

Commissioner for Justice, Consumers and Gender Equality, Věra Jourová, stated: “With around 5,000 participating companies, the Privacy Shield has become a success story. The annual review is an important health check for its functioning. We will continue the digital diplomacy dialogue with our U.S. counterparts to make the Shield stronger, including when it comes to oversight, enforcement and, in a longer-term, to increase convergence of our systems.”

Among the improvements, the third review notes that the U.S. Department of Commerce is ensuring the necessary oversight in a more systematic manner by, for example, carrying out monthly checks of a sample of companies to verify compliance with Privacy Shield principles.

Enforcement action has improved with the Federal Trade Commission taking enforcement action related to the Privacy Shield in seven cases.

An increasing number of EU individuals are making use of their rights under the Privacy Shield and the relevant redress mechanisms are functioning well.

In addition to the appointment of the permanent Ombudsperson, the final two vacancies on the Privacy and Civil Liberties Oversight Board have been filled, ensuring that it is fully-staffed for the first time since 2016.

However, the Commission recommends that certain concrete steps be taken to better ensure the effective functioning of the Privacy Shield in practice. This includes further strengthening the (re)certification process for companies who want to participate by shortening the time of the (re)certification process; expanding compliance checks, including concerning false claims of participation in the framework; and developing additional guidance for companies related to human resources data. The Commission also expects the Federal Trade Commission to further step up its investigations into compliance with substantive requirements of the Privacy Shield and provide the Commission and the EU data protection authorities with information on ongoing investigations.

Background

The EU-U.S. Privacy Shield decision was adopted on 12 July 2016 and the Privacy Shield framework became operational on 1 August 2016. It protects the fundamental rights of anyone in the EU whose personal data is transferred to certified companies in the United States for commercial purposes and brings legal clarity for businesses relying on transatlantic data transfers.

The Commission committed to reviewing the arrangement on an annual basis, to assess if it continues to ensure an adequate level of protection for personal data. The first and second annual review took place in September 2017 and October 2018, respectively.

On 12 September 2019, the Director-General for Justice, Consumers and Gender Equality, Tiina Astola, and the U.S. Secretary of Commerce, Wilbur Ross, launched the discussions for the third review of the EU-U.S. Privacy Shield (statement). The findings in this report are based on meetings with representatives of all U.S. government departments in charge of running the Privacy Shield, including the Department of Commerce, the Federal Trade Commission, the Office of the Director of National Intelligence and the Department of Justice, which took place in Washington in September 2019, as well as on input from a wide range of stakeholders, including feedback from companies and privacy NGOs. Representatives of the EU’s independent data protection authorities also participated in the review. There is currently litigation pending before the Court of Justice of the European Union on EU-U.S. data transfers, which may also have an impact on the Privacy Shield. A hearing took place in July 2019 in case C-311/18 (Schrems II) and, once the Court’s judgement is issued, the Commission will assess its consequences for the Privacy Shield.

the sting Milestones

Featured Stings

Can we feed everyone without unleashing disaster? Read on

These campaigners want to give a quarter of the UK back to nature

How to build a more resilient and inclusive global system

Stopping antimicrobial resistance would cost just USD 2 per person a year

EU finally to extend sanctions on Russia despite arguments; Greece again in Europe’s spotlight

What is the Internet of Things?

Scale of displacement across Myanmar ‘very difficult to gauge’, says UN refugee agency

EU migrant crisis: Germany, France and UK to show the way. Will the rest of the EU follow?

Global Recovery: The EU disburses SDR 141 Million to the IMF’s Catastrophe Containment and Relief Trust

Joint  EU-US Statement on  the Global Methane Pledge 

“Joining forces to #BeatPollution”, a Sting Exclusive by the Head of UNEP in Brussels

This is what CEOs around the world see as the biggest risks to business

How scientists are turning living cells into the tiny factories of the future

COVID-19 is threatening the lives of migrant children held in US custody

The COVID-19 recovery can be the vaccine for climate change

At G20 Summit OECD’s Gurría says collective action vital to tackle global challenges

UN rights chief ‘appalled’ by US border detention conditions, says holding migrant children may violate international law

Why trade wars have no winners

GSMA Announces Final Event Lineup for Highly Anticipated 2019 “MWC Los Angeles, in Partnership with CTIA”

EU leading in global agri-food trade

Member States’ compliance with EU law in 2018: efforts are paying off, but improvements still needed

The widely advertised hazards of the EU not that ominous; the sting is financial woes

South Korea once recycled 2% of its food waste. Now it recycles 95%

MEPs adopt Technical Support Instrument to speed up post-COVID-19 recovery

MEPs demand end to EU arms exports to Saudi Arabia

The ECB ‘accidentally’ followed IMF‘s policy advice for growth and job creation by printing more money

Brexit: European Commission publishes Communication on preparing for the UK’s withdrawal from the EU

The gender gap of medicine in 2018

Why our future relies on more inclusive and transparent innovation

What’s behind South Korea’s elderly crime wave?

European Commissioner for Youth wants young people to be at heart of policy making

EU: All economic indicators in free fall

Stop wars disguised as peace missions

Young translators at EU schools – Commission opens registration for 2020 translation contest

Social, cultural diversity ‘an enormous richness, not a threat’ Guterres declares calling on investment for a harmonious future

ECB money bonanza not enough to revive euro area, Germany longs to rule with stagnation

Five avoidable deaths per minute shows urgent need for action on patient safety

Towards a seamless internal EU market for industrial goods

Digital Green Certificate is the right move but speeding up vaccination is key

Myanmar doing too little to ensure displaced Rohingya return: UN refugee agency chief

Brexit: UK business fear of a no-deal scenario preparing for the worst

How man and machine can work together in the age of AI

MWC 2016 LIVE: Orange targets VoLTE and Voice over Wi-Fi; strikes Google partnership

75 years after Auschwitz liberation, antisemitism still threatens ‘foundations of democratic societies’

UNESCO food and culture forum dishes up fresh serving of SDGs

European markets itchy with short-term disturbances

Bioethics: how to recover trust in the doctor-patient relationship

This Kenyan company makes fuel from human poo

“Healthcare system and socioeconomic inequities”-through the lens of developing nations

China repels EU allegations of export subsidies

Germany’s fiscal and financial self-destructive policies

Cameron readies to support ‘yes’ for Britain in the EU

How Bangladesh’s leaders should respond to the economic threats of COVID-19

Civil protection: Parliament strengthens EU disaster response capability

Where are fleeing Afghans finding refuge?

Why the 33,000 staff European Commission did not have a real contingency plan for the refugee crisis?

MEPs approve the EU’s new culture programme

Human Rights breaches in Russia, Afghanistan and Burkina Faso

From raised fists at the 1968 Olympics to taking the knee: A history of racial justice protests in sport

Trump’s Russian affair spills over and upsets Europe

Why is Merkel’s Germany so liberal with the refugees? Did the last elections change that?

MEPs vote for upgrade to rail passenger rights

Mobile technology saving lives: changing healthcare with simple technology solutions

European Defence Fund on track with €525 million for Eurodrone and other joint research and industrial projects

More Stings?

Speak your Mind Here

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: