European Court ruling causes confusion over EU-US data transfer
The European Court of Justice has struck down the ‘Privacy Shield’ data-sharing agreement, reports the Financial Times. The court ruled that the agreement did not limit access to data by US authorities to standards ‘equivalent to those required under EU law’, but left open the possibility that data transfers could be covered by ‘standard contractual clauses’ (SCCs). Companies now have to decide whether their SCCs are, in practice, compliant with the General Data Protection Regulation, says the paper. A spokesman for the Business Software Alliance is quoted saying: ‘we are relieved that SCCs remain valid, which is a positive outcome. But today’s Privacy Shield decision just removed from the table one of the few, and most trusted, ways to transfer data across the Atlantic.’ Brussels said that work to modernise SCCs to handle data flows outside the EU would continue.
The European Court of Justice has struck down the ‘Privacy Shield’ data-sharing agreement ruling that the agreement did not limit access to data by US authorities equivalent to EU standards
- Region:
- Europe
- Series:
- Regulatory Watch
