EU-USA: PRIVACY SHIELD: EU Article 29 Working Party on data protection

Support our work: become a Friend of Statewatch from as little as £1/€1 per month.

"On 29 February 2016, the European Commission published a Communication, a draft adequacy decision and the annexed texts constituting a new framework for transatlantic exchanges of personal data for commercial purposes: the EU-U.S. Privacy Shield (hereinafter: Privacy Shield), which seeks to replace the previous U.S. Safe Harbour invalidated by the Court of Justice of the European Union (hereinafter: CJEU) on 6 October 2015, in the Schrems case....

With regard to the applicable law, the WP29 highlights that if the Privacy Shield adequacy decision is adopted on the basis of Directive 95/46/EC, it needs to be consistent with the EU data protection legal framework, both in scope and terminology. The WP29 considers a review must be undertaken shortly after the entry into application of the General Data Protection Regulation, in order to ensure the higher level of data protection offered by the Regulation is followed in the adequacy decision and its annexes....

The WP29 also concludes that onward transfers of EU personal data are insufficiently framed, especially regarding their scope, the limitation of their purpose and the guarantees applying to transfers to Agents. As regards the access to Privacy Shield data by law enforcement, especially to foreseeability of the legislation is a concern, due to the extensive and complex nature of the U.S. law enforcement system at both Federal and state level, and the limited information included in the adequacy decision."


See the full text: Opinion 01/2016 on the EU – U.S. Privacy Shield draft adequacy decision (pdf) They rip the Privacy Shield to shreds.

Our work is only possible with your support.
Become a Friend of Statewatch from as little as £1/€1 per month.

 

Spotted an error? If you've spotted a problem with this page, just click once to let us know.

Report error