EU-U.S. Privacy Shield: Third review welcomes progress while identifying steps for improvement

privacy shield

(Credit: European Union)

This article is brought to you in association with the European Commission.


Today the European Commission publishes its report on the third annual review of the functioning of the EU-U.S. Privacy Shield. The report confirms that the U.S. continues to ensure an adequate level of protection for personal data transferred under the Privacy Shield from the EU to participating companies in the U.S. Since the second annual review, there have been a number of improvements in the functioning of the framework, as well as appointments to key oversight and redress bodies, such as the Privacy Shield Ombudsperson. Being in the third year of the Shield’s operation, the review focused on the lessons learnt from its practical implementation and day-to-day functionality. Today there are about 5,000 companies participating in this EU-U.S. data protection framework.

Commissioner for Justice, Consumers and Gender Equality, Věra Jourová, stated: “With around 5,000 participating companies, the Privacy Shield has become a success story. The annual review is an important health check for its functioning. We will continue the digital diplomacy dialogue with our U.S. counterparts to make the Shield stronger, including when it comes to oversight, enforcement and, in a longer-term, to increase convergence of our systems.”

Among the improvements, the third review notes that the U.S. Department of Commerce is ensuring the necessary oversight in a more systematic manner by, for example, carrying out monthly checks of a sample of companies to verify compliance with Privacy Shield principles.

Enforcement action has improved with the Federal Trade Commission taking enforcement action related to the Privacy Shield in seven cases.

An increasing number of EU individuals are making use of their rights under the Privacy Shield and the relevant redress mechanisms are functioning well.

In addition to the appointment of the permanent Ombudsperson, the final two vacancies on the Privacy and Civil Liberties Oversight Board have been filled, ensuring that it is fully-staffed for the first time since 2016.

However, the Commission recommends that certain concrete steps be taken to better ensure the effective functioning of the Privacy Shield in practice. This includes further strengthening the (re)certification process for companies who want to participate by shortening the time of the (re)certification process; expanding compliance checks, including concerning false claims of participation in the framework; and developing additional guidance for companies related to human resources data. The Commission also expects the Federal Trade Commission to further step up its investigations into compliance with substantive requirements of the Privacy Shield and provide the Commission and the EU data protection authorities with information on ongoing investigations.

Background

The EU-U.S. Privacy Shield decision was adopted on 12 July 2016 and the Privacy Shield framework became operational on 1 August 2016. It protects the fundamental rights of anyone in the EU whose personal data is transferred to certified companies in the United States for commercial purposes and brings legal clarity for businesses relying on transatlantic data transfers.

The Commission committed to reviewing the arrangement on an annual basis, to assess if it continues to ensure an adequate level of protection for personal data. The first and second annual review took place in September 2017 and October 2018, respectively.

On 12 September 2019, the Director-General for Justice, Consumers and Gender Equality, Tiina Astola, and the U.S. Secretary of Commerce, Wilbur Ross, launched the discussions for the third review of the EU-U.S. Privacy Shield (statement). The findings in this report are based on meetings with representatives of all U.S. government departments in charge of running the Privacy Shield, including the Department of Commerce, the Federal Trade Commission, the Office of the Director of National Intelligence and the Department of Justice, which took place in Washington in September 2019, as well as on input from a wide range of stakeholders, including feedback from companies and privacy NGOs. Representatives of the EU’s independent data protection authorities also participated in the review. There is currently litigation pending before the Court of Justice of the European Union on EU-U.S. data transfers, which may also have an impact on the Privacy Shield. A hearing took place in July 2019 in case C-311/18 (Schrems II) and, once the Court’s judgement is issued, the Commission will assess its consequences for the Privacy Shield.

the sting Milestone

Featured Stings

Can we feed everyone without unleashing disaster? Read on

These campaigners want to give a quarter of the UK back to nature

How to build a more resilient and inclusive global system

Stopping antimicrobial resistance would cost just USD 2 per person a year

Can We(esterners) ever understand (the) Chinese

High-technology manufacturing saves the EU industry

IMF’s Lagarde indirectly cautioned Eurozone on deflation

Italy’s Letta: A European Banking Union soon or Eurozone collapses

Importance of teaching ethics in Brazilian Medical Schools

U-turns on Global Compact ‘reflect poorly’ on countries concerned: senior UN migration official

Libyan national conference postponed, nearly 500,000 children at ‘direct risk’ from fighting around Tripoli

Hundreds of thousands of lives still lost each year to small arms, UN conference hears

Saudi woman seeking asylum in Thailand ‘now in a secure place’ says UNHCR

An ageing workforce isn’t a burden. It’s an opportunity

De Gucht: More gaffes with the talks on the EU-US free trade agreement

Climate Change: A Healthcare Emergency

Amazon: our green is turning to ashes

Why the foundations of the modern world are costing the earth

These countries are best at attracting and nurturing talented workers

US-China trade war: Washington now wants control of the renminbi-yuan

Kellen Europe Hosts EuroConference 2016

Interview with ourselves: the mental health of health professionals

The EU approves a new package of budget assistance to the Republic of Moldova to support rule of law and rural development reforms

Brazil identifies a clear pathway for aligning its transfer pricing framework with the OECD standard

These are the cities with the biggest carbon footprints

34 million Americans know someone who died after being unable to pay for medical treatment

Ireland: prepare now for rising fiscal pressures, external risks

China confirms anti-state-subsidy investigation on EU wine imports

New UN-Syrian Action Plan signals an ‘important day’ for child protection, says UN envoy

Haiti stands ‘at the crossroads’ between peacekeeping, development – Bachelet urges strengthened ‘human rights protection’

FROM THE FIELD: Faces and Voices of Conflict

Nicaragua: MEPs condemn brutal repression and demand elections

Federalist EU ‘naively’ believes Washington shares her TTIP high fever

Stricter rules and tougher sanctions for market manipulation and financial fraud

Why feeding the planet doesn’t have to mean sacrificing our forests

France pushes UK to stay and Germany to pay

Belgium: keep up reforms to increase employment and productivity growth

AI has huge potential – but it won’t solve all our problems

UN climate panel says ‘unprecedented changes’ needed to limit global warming to 1.5°C

3 defining characteristics of youth-led social innovation

European Commission adopts new list of third countries with weak anti-money laundering and terrorist financing regimes

Actions not words: what was promised at the UN’s landmark climate summit?

UN chief welcomes resolution to 27-year-old disagreement over renaming the former Yugoslav Republic of Macedonia

Car bomb attack on National Police Academy in Colombia, ‘strongly condemned’ by UN

Donor countries set international standard for preventing sexual exploitation, abuse, and harassment in development sector

This tool shows you which cities will flood as ice sheets melt

FROM THE FIELD: Faces and Voices of Conflict

European Semester Winter Package: assessing Member States’ progress on economic and social priorities

3 charts that show how attitudes to climate science vary around the world

Guterres expresses ‘grave concern’ following explosion at large political rally for reform-minded Ethiopian Prime Minister

Why the world is not as globalized as you think

ECB asks for more subsidies to banks

These Harvard scientists think we’ll have to socially distance until 2022

Security Council extends mandate of UN Interim Force in Lebanon for a year

Permanent structured cooperation (PESCO) on the table of NATO Defense Ministers amid US concerns

Visa liberalisation: Commission reports on fulfilment of visa-free requirements by Western Balkans and Eastern Partnership countries

Brazil must immediately end threats to independence and capacity of law enforcement to fight corruption

We spend half our time at work in meetings – and that’s not necessarily a bad thing

As Alan Turing makes the £50 note, how do countries design their currencies?

How cocoa farming can help stop deforestation

Brexit mission impossible: Theresa May was so desperate that had to appoint Boris Johnson as Foreign Secretary

These forms of exercise are best for your mental health

Sudan: Health challenges in the Sustainable Development Goals era

‘Critical’ window of opportunity closing fast in Iraq, Security Council hears

More Stings?

Advertising

Speak your Mind Here

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s