Category: European Data Protection

Statement of the WP29 on the “EU – U.S. Privacy Shield”

4. February 2016

After the Press Conference held by Věra Jourová and Andrus Ansip from the European Commission about the proposal for a new agreement between EU and U.S. to carry out international data transfers, the WP29 met on the 2-3 February in order to discuss the consequences of the sentence from the ECJ and the future of international data transfers between EU and the U.S.

The WP29 has remarked that the following four guarantees should be ensured when international data transfers take place:

a) Transparency: the data subject whose data is processed should be informed so that he/she is able to foreseen the consequences of the data transfer.

b) Proportionality and necessity: the finality for which personal data is collected and accessed and the rights of the data subject should be balanced.

c) Independency of a control body that carries out checks in an effective and impartial manner.

d) Effective remedies: the individual should have the possibility to defend his/her rights before an independent body.

The WP29 will also analyze the existing mechanisms to carry out international data transfers, which currently can only take place if Standard Contractual Clauses or Binding Corporate Rules (BCR) are used. In any case, European DPAs will examine data transfers on a case-by-case basis.

However, the WP29 is still looking forward to receive the relevant documents related to the EU – U.S. Privacy Shield in order to analyze its content and to determine to which extent the agreement is legally binding.

 

If you would like to be updated on a regular basis on this and other data protection issues such as the General Data Protection Directive (GDPR), sign in for one of our newsletters:

German / European Data Protection http://www.datenschutzticker.de/newsletter/ (German Language)

International Data Protection http://www.privacy-ticker.com/newsletter/ (English language)

For how to proceed with your companies´ policies on internal or external data protection transfers to third countries and prepare for the GDPR seek individual advice.

 

The “EU – U.S. Privacy Shield”, a new agreement for international data transfers

3. February 2016

After continuous negotiations during the last months to agree on a new framework for international data transfers, since the ECJ invalidated the Safe Harbor Decision, Andrus Ansip (EU Commission Vice-President) and Věra Jourová (Commissioner) announced yesterday in a Press Conference that a new agreement (EU – U.S. Privacy Shield) to carry out international data transfers has been reached.

Under the EU – U.S. Privacy Shield, the following elements will be regulated:

  • Several redress possibilities will be guaranteed to EU citizens when data transfers to U.S. take place and companies, as first redress possibility, will have deadlines to resolve complaints.
  • The resolution includes a “multi-layered” approach in order to avoid that any complaints remain unresolved by offering different resolution mechanisms. Also the European DPAs will have the possibility to refer complaints to the U.S. Department of Commerce and to the Federal Trade Commission.
  • Companies will be subject to strong obligations regarding the processing of personal data imported from EU Member States. Particularly, personal data processed for HR purposes in the U.S. will have to comply with the decisions of EU DPAs.
  • It will be ensured that national authorities only have access to personal data from EU citizens in exceptional cases and subject to the principles of necessity and proportionality.
  • The figure of the “ombudsman” will be created, in order to make possible that EU citizens can complain regarding surveillance activities by national authorities.

This new framework should be reviewed in an annual basis, so that the rights of EU citizens regarding data protection are continuously ensured. This is an important step forward in comparison with the invalidated Safe Harbor Decision.

Although the main points of this agreement have been discussed, the written draft may take up to three months, as Commissioner Věra Jourová said. The Working Party 29 will advise the College of Commissioners on this issue before adopting the official decision. Additionally, the agreement will have to withstand scrutiny from the ECJ.

New Safe Harbor Agreement

2. February 2016

European officials and the U.S. agreed today on a new safe harbor agreement. The EU Article 29 Working Group had set a deadline until the end of January 2016 to find an alternative agreement, which was missed. The agreement still needs to be approved by the 28 member states. Further information on the new safe harbor agreement is expected after the EU Article 29 Working Group meeting, which is supposed to take place today and tomorrow.

28th January: Data Protection Day

29. January 2016

Yesterday, 28th of January, the 10th anniversary of the Data Protection Day was celebrated. This day was launched on April 2006 by the Committee of Ministers of the Council of Europe.

Several data protection authorities from different EU Member States and member institutions of the Council of Europe organized events in order to commemorate the Europe´s Convention 108 on the protection of personal data, the first binding document on this field at international level.

On this day, conferences, workshops and awareness activities take place, in order to discuss about the most current issues on data protection and IT security. This year the focus lied on international data transfers and cybersecurity.

Pages: Prev 1 2 3 4 5 6 7 8 9
1 7 8 9