The Privacy Shield: Update on the state of play of the EU-US data

The CJEU’s Schrems judgment of October 2015, besides declaring the European Commission’s Decision on the EU-US ‘Safe Harbour’ data transfer regime invalid, has also settled a number of crucial requirements corresponding to the foundations of EU data protection. In less than one year from the CJEU ruling, the Commission had adopted a new adequacy decision in which the new framework for EU-US data transfer, the Privacy Shield (2016), is deemed to adequately protect EU citizens. The main improvements of the Privacy Shield (over its predecessor), as well as the critical reactions to the new arrangements, are discussed in this paper. The first joint annual review took place in September 2017 on which both the Commission and Article 29 Working Party issued their own reports. Although progress is recognised, a number of concerns remain and new challenges to the Privacy Shield have arisen, among others, from the Facebook/Cambridge Analytica scandal, as pointed out by the European Parliament in its recent resolution.
The CJEU’s Schrems judgment of October 2015, besides declaring the European Commission’s Decision on the EU-US ‘Safe Harbour’ data transfer regime invalid, has also settled a number of crucial requirements corresponding to the foundations of EU data protection. In less than one year from the CJEU ruling, the Commission had adopted a new adequacy decision in which the new framework for EU-US data transfer, the Privacy Shield (2016), is deemed to adequately protect EU citizens. The main improvements of the Privacy Shield (over its predecessor), as well as the critical reactions to the new arrangements, are discussed in this paper. The first joint annual review took place in September 2017 on which both the Commission and Article 29 Working Party issued their own reports. Although progress is recognised, a number of concerns remain and new challenges to the Privacy Shield have arisen, among others, from the Facebook/Cambridge Analytica scandal, as pointed out by the European Parliament in its recent resolution.

A victory for us all: European Court of Justice makes landmark ruling to invalidate the Privacy Shield - European Digital Rights (EDRi)

Officials 'thrilled' with EU-US data flows agreement, 'work continues' on finalization

Officials 'thrilled' with EU-US data flows agreement, 'work continues' on finalization

Privacy Shield 2.0: EU-US data transfers decision drafted

The EU-US Data Privacy Framework: Transferring Personal Data Under the New Privacy Shield - Jackson Lewis

Privacy and Data Protection: What to Expect in 2023 - iubenda help

GDPR, ePrivacy and CCPA - Advice and Insights - Cookiebot™ Blog

EU and US agree to new data-transfer pact to replace Privacy Shield

EU adopts Privacy Shield replacement for U.S. data transfers, News Brief

Becoming tech allies: 24 targets for the EU-US Trade & Technology Council by 2024 - DIGITALEUROPE

The EU-US Privacy Shield invalidated: What this means for you

New adequacy decision: EU-US Data Privacy Framework adopted - Lexology

The EU-U.S. Data Privacy Framework (DPF): What Does It Mean for You?