Safe Harbor 2.0 Agreement Reached

Posted by fgilbert on February 2nd, 2016

On February 2, 2016, representatives of the European Commission and the United States agreed on a new framework for transatlantic data flows: the EU-US Privacy Shield. The main elements of the arrangement provide that:

  • US companies that wish to receive EU data will be required to commit to stringent obligations on how personal data is processed and individual rights are guaranteed;
  • Citizens who think that their data has been misused will have several redress possibilities ;
  • Companies will be required to respond to citizens’ complaints within a set timeframe;
  • European Data Protection Authorities will have the ability to refer complaints to the US Department of Commerce and the Federal Trade Commission;
  • Alternative Dispute resolution will be free of charge;
  • Access by U.S. law enforcement to personal data transferred under the EU-US Privacy Shield will be subject to clear conditions, limitations and oversight mechanisms, preventing generalized access;
  • Complaints on possible access by national intelligence authorities will be referred to an Ombudsperson;
  • The implementation of the arrangement – including the restriction to law enforcement access to data – will be subject to annual joint reviews. The European Commission and the U.S. Department of Commerce will conduct the reviews and invite US national intelligence experts and European Data Protection Authorities to participate.

The College of EU Commissioners, which approved the final terms of the arrangement, has mandated Vice-President Ansip and Commissioner Jourová to prepare a draft “adequacy decision” in the coming weeks clarifying the elements of the EU-US Privacy Shield.

Once the document has been finalized, it will be submitted to approval by the College of Commissioners. The Article 29 Working Party and a committee composed of representatives of the Member States will also be consulted. In the meantime, the U.S. will make the necessary preparations to put in place the new framework, monitoring mechanisms and new Ombudsman.

Similar Posts
Posted in Europe

One Response to “Safe Harbor 2.0 Agreement Reached”

  1. […] a new EU-US Privacy Shield. The concept of an EU-US Privacy Shield was outlined in an arrangement published on February 2, 2016. The Shield is intended to replace the EU-US Safe Harbor Agreement, which was invalidated in an […]