The EU – U.S. Privacy Shield: next steps

19. February 2016

The EU Commission and the U.S. Government agreed recently on the EU- U.S. privacy Shield as a possible mechanism to carry out international data transfers on a valid basis and providing an adequate level of data protection. The agreement shall be adopted by a decision.

The process until both, the proposed agreement and the corresponding decision, are adopted is complex and requires the opinion of several EU institutions

  • The EU Commission should make the proposal for the decision of adopting the agreement. The decision is expected by thy end of February.
  • The WP29, made up of the DPAs from the EU Member States and the European Data Protection Supervisor (EDPS) will have to give its opinion on the proposed agreement. This opinion will not be binding for the EU Commission.
  • Also the Article 31 Committee, established pursuant to art. 31 of the EU Data Protection Directive, will we asked to give an opinion.
  • Finally, the College of the EU Commission will decide about the adoption of the decision.

Additionally, also the ECJ will be requested to examine the proposal in order to determine if it provides an adequate level of protection of the fundamental rights of EU citizens. Also, the DPAs from the Member States may refer to the ECJ for clarification about the agreement.