Data Protection: the Safe Harbor 2.0

​On 2 February 2016, the European Commission and the United States reached an agreement on a new framework for transatlantic data flows. This EU-US Privacy shield will replace the Safe Harbor framework invalidated last October by the famous SCHREMS ruling.

05/02/2016

​On 2 February 2016, the European Commission and the United States reached an agreement on a new framework for transatlantic data flows. This EU-US Privacy shield will replace the Safe Harbor framework invalidated last October by the famous SCHREMS ruling.

Context

In order to facilitate data transfers between the United States and the European Union while ensuring a high level of protection of personal data, the Commission adopted the decision 2000/520/EC of 20 July 2000 which considered that the United States’ principles set out in the Safe Harbor ensured an adequate level of protection of personal data as required by the European Directive 95/46/EU.

However, in October 2015 the Commission’s Safe Harbor decision was declared invalid by the European Court of Justice. Following this ruling the European Commission has intensified negotiations with the United States in order to put in place a renewed and safe framework for transfers of personal data.

A new framework for transatlantic data flows

According to recent press releases, the EU-US Privacy Shield will include the following elements:

• Clear safeguards and transparency obligations on U.S. government access;

• Strong obligations on companies handling Europeans’ personal data and robust enforcement;

• Effective protection of European citizens’ rights with several redress options.

Next steps

The political agreement has been approved by the College of Commissioners which mandated Vice-President Ansip and Commissioner for Justice Jourova to prepare a draft “adequacy decision” in the coming weeks.

During its meeting on 3 February, the Article 29 working party called on the Commission to communicate all documents relating to the new framework by the end of February.

If it is adopted, this new decision would again allow companies to base their transfers of data to the United States on this additional legal basis.

Interested in data protection topics?

Please note that our specialists will give a presentation on the much anticipated EU data protection regulation on 25 February at 12 at Arendt House.To register please click here.

Should you wish to print this newsflash, please click on the link below:

YOU MIGHT ALSO WANT TO DISCOVER

14/05/2024
AMLD6 – EU unveils tougher anti-money laundering rules: key highlights

AMLD6 is set to address the organisation of the institutional AML/CFT framework at national level. The new directive transfers the rules applying to the private sector from AMLD6 to the newly adopted regulation on AML/CFT in order to ensure a consistent level of compliance across...

Read More_
enhance
your
experience

Would you like to configure your browsing experience at arendt.com?

Let us know your profile and favourite topics

Industries

Banks & Financial Institutions and Insurance

Corporates

Private Clients
Public Sector

UCITS / Liquid Alts

Private Debt
Private Equity
Real Estate