Trends

Article 29 WP sceptical on the EU/US Privacy Shield

Article 29 WP sceptical on the EU/US Privacy Shield

Article 29 WP sceptical on the EU/US Privacy Shield

14.04.2016

On 6 October 2015, the CJEU invalidated the U.S. Safe Harbor.

The EU Commission then published a draft adequacy decision on 29 February, putting in place a new legal framework for transatlantic transfers of personal data (the “Privacy Shield”).

Yesterday, the WP29, a body composed of all the EU DPAs, issued its opinion on the Privacy Shield. It welcomes the “significant improvements brought by the Privacy Shield compared to the Safe Harbour decision”. However, it expresses several concerns and urges the Commission to resolve them. The main points of criticism are:

  1. the Privacy Shield package lacks clarity, both in terms of structure and language;
  2. some key EU data protection principles are not reflected, barring a finding of “essential equivalence”; and
  3. within the context of surveillance, there is no clear limitation on massive and indiscriminate collection of personal data originating from the EU.

Although this opinion is not legally binding, it is an important step as regards the ultimate final approval of the Privacy Shield by EU countries. You can find the opinion here.
 

Team

Related news

02.10.2019 EU law
Seminar: Data protection implications of (a no-deal) Brexit

Seminar - On October 2nd at 4 pm, we organize a seminar where we will discus the implications of a (no-deal) Brexit on data protection.  These issues affect all businesses interacting between UK and EEA (including EU) and which send or receive data to and from UK. We will highlight the main challenges both in the case of a hard Brexit on 31 October 2019 and in other scenarios. We will also offer guidelines to help your organisation mitigate the respective risks.

Read more

19.08.2019 EU law
Enable “likes” and bear joint-controllership

Articles - The Court of Justice of the European Union recently ruled, in Case C-40/14 Fashion ID GmbH & Co. KG v Verbraucherzentrale NRW eV,  that a website operator that features “Like” social-media plugin from Facebook likely qualifies as joint-controller with Facebook for its website visitors’ personal data collection and transmission to Facebook.

Read more

28.08.2019 NL law
Masterclass: e-signature and electronic identifiers

Masterclass - Stibbe is organising a Masterclass on 26 September 2019 in Amsterdam on the subject of e-signature and electronic identifiers. This Masterclass will cover the legal framework and focus especially on the numerous possibilities for applying the various electronic signatures in different situations. In addition, we explain the regulations governing electronic identifiers, and the mandatory European recognition they receive.

Read more

Our website uses functional cookies for the functioning of the website and analytic cookies that enable us to generate aggregated visitor data. We also use other cookies, such as third party tracking cookies - please indicate whether you agree to the use of these other cookies:

Privacy – en cookieverklaring