Skip to content
Schedule a Call
Call Now

What does the EU-US Data Agreement entail for privacy?

Article by Tsaaro

7 min read

What does the EU-US Data Agreement entail for privacy?

The United States (“US”) and the European Commission (“EU”) had agreed to create a new Trans-Atlantic Data Privacy Framework to promote trans-Atlantic data flows and address concerns raised by the European Union’s Court of Justice (“CJEU”) when it overturned the Commission’s adequacy decision underlying the EU-US Privacy Shield framework in 2020.

This Framework would reinstate a crucial legal mechanism for transferring personal data from the EU to the US. The US has committed to implementing new safeguards to ensure that signals intelligence activities are necessary and proportionate in the pursuit of defined national security objectives, providing the privacy of EU personal data, and creating a new mechanism for EU individuals to seek redress if they believe signals intelligence activities have unlawfully targeted them. 

A brief overview of past events 

The conflict originates from a complaint submitted over a decade ago by Austrian lawyer and privacy campaigner Max Schrems, who was concerned about how Facebook handled his data in light of revelations about U.S. government cyberespionage by former National Security Agency contractor Edward Snowden.

Along the way, the EU’s top court also ruled that the Privacy Shield deal protecting transatlantic data transfers was invalid because it violated the 27-nation bloc’s stringent data privacy requirements. Companies were compelled to rely on legal stock contracts to continue the transfers. The debate had raised the possibility that Facebook might have to redesign its data centres to keep European data out of the United States.

What does the new EU-US Data Agreement entail?

The new Trans-Atlantic Data Privacy Framework will enable an equitable and competitive digital economy and establish the groundwork for future economic cooperation by ensuring a permanent and reliable legal framework for data flows. It addresses the European Union’s Court of Justice’s Schrems II judgement about US legislation governing signals intelligence activities. The United States has made extraordinary promises under the Trans-Atlantic Data Privacy Framework to:

  1. Enhance the privacy and civil rights measures that govern the US signals intelligence activities;
  2. Create a new redress system with independent and binding authority; and
  3. Improve its current, thorough and multi-layered oversight of signals intelligence activities.

 

For example, the new Framework ensures that:

  1. Signal intelligence collection may be carried out only when necessary to achieve legitimate national security objectives, and it must not have a disproportionate impact on individual privacy and civil freedoms.
  2. EU citizens may seek redress through a new multi-tiered redress structure that comprises an independent Data Protection Review Court comprised of individuals recruited from outside the US government who would have full ability to assess allegations and direct remedial measures as necessary; and
  3. Intelligence agencies in the United States will implement processes to assure effective oversight of new privacy and civil liberties requirements.

 

Benefits of the Agreement

Citizens on both sides of the Atlantic will gain significantly from this Framework. The agreement includes –

  1. New, high-standard pledges to protect personal data for EU citizens. 
  2. It will allow citizens and businesses on both sides of the Atlantic to continue the flow of data that underlies more than $1 trillion in cross-border commerce each year, as well as 
  3. It also allows firms of all sizes to compete in marketplaces. 

 

It is the result of more than a year of thorough negotiations between the EU and the US following a 2020 decision by the CJEU stating that the previous EU-US arrangement, known as Privacy Shield, did not meet EU legal criteria.

The new Trans-Atlantic Data Privacy Framework highlights mutual commitment to privacy, data protection, the rule of law, and collective security, as well as a mutual understanding of the importance of trans-Atlantic data, flows to respective citizens economies, and societies in the EU-US region. 

Data transfers are crucial to the trans-Atlantic economic relationship and all large and small enterprises in all industries. In reality, more data moves between the United States and Europe than anywhere else, allowing the $7.1 trillion US-EU economic connection to function.

The Way Forward

Participating enterprises and organisations using the Framework to protect data flows legally will be required to continue adhering to the Privacy Shield Principles, including self-certification through the US Department of Commerce.

Individuals in the EU will continue to have various options for resolving complaints about participating organisations, including alternative dispute resolution and binding arbitration.

The US intelligence community will execute these new principles to effectively protect its citizens and those of its friends and partners, following the high-standard protections provided by this Framework.

The US government and the European Commission teams will now work together to translate this agreement into legal documents that must be signed by both parties to put in place this new Trans-Atlantic Data Privacy Framework. These promises from the United States will be placed in an Executive Order that will serve as the foundation for the Commission’s assessment in its future sufficiency judgement.

Conclusion

According to Facebook’s head of global affairs, Nick Clegg, the new agreement “will help keep people connected and services running.” “It will provide invaluable certainty for American and European businesses of all sizes, including Meta, that rely on data transfer quickly and safely.” Google has praised the EU and US efforts to “protect transatlantic data transfers.”

However, Schrems described the latest agreement as a “political announcement.” He warned that it could end up in court because his Vienna-based group NOYB would thoroughly examine it and challenge anything that violated EU law. 

Thus, as the agreement was only struck “in principle,” there appears to be some ambiguity, and we may have to wait a while before seeing the final text. Even optimistic views persist among privacy specialists who commend the negotiators’ efforts and are eager to ensure that organisations continue to be accredited to the expanded Privacy Shield.

 

 

971 thoughts on “What does the EU-US Data Agreement entail for privacy?”

  2. TimothyBerve

    Главные новости мира https://ua-vestnik.com и страны: политика, экономика, спорт, культура, технологии. Оперативная информация, аналитика и эксклюзивные материалы для тех, кто следит за событиями в реальном времени.

  54. Derekhog

    Конструкторы оружия России https://guns.org.ru история создания легендарного оружия, биографии инженеров, технические характеристики разработок.

  305. gully bet login

    demais este conteúdo. Gostei bastante. Aproveitem e vejam este conteúdo. informações, novidades e muito mais. Não deixem de acessar para aprender mais. Obrigado a todos e até a próxima. 🙂

  425. car rental singapore

    Having read this I thought it was very informative. I appreciate you taking the time and effort to put this article together. I once again find myself spending way to much time both reading and commenting. But so what, it was still worth it!

  734. link gacor hari ini

    I have not checked in here for some time since I thought it was getting boring, but the last few posts are great quality so I guess I will add you back to my daily bloglist. You deserve it my friend 🙂

  919. DanielEldef

    Все о компьютерных играх https://lifeforgame.ru/ обзоры новых проектов, рейтинги, детальные гайды, новости индустрии, анонсы и системные требования. Разбираем особенности геймплея, помогаем с настройками и прохождением. Следите за игровыми трендами, изучайте секреты и погружайтесь в мир гейминга.

  921. orangeville limo

    Good – I should definitely pronounce, impressed with your web site. I had no trouble navigating through all the tabs as well as related info ended up being truly simple to do to access. I recently found what I hoped for before you know it in the least. Quite unusual. Is likely to appreciate it for those who add forums or anything, web site theme . a tones way for your customer to communicate. Nice task.

  927. Davidbrell

    Все о недвижимости https://vam42.ru покупка, аренда, ипотека. Разбираем рыночные тренды, юридические тонкости, лайфхаки для выгодных сделок. Помогаем выбрать квартиру, рассчитать ипотеку, проверить документы и избежать ошибок при сделках с жильем. Актуальные статьи для покупателей, арендаторов и инвесторов.

  931. Davidbrell

    Все о недвижимости https://gpnw.ru покупка, аренда, ипотека. Разбираем рыночные тренды, юридические тонкости, лайфхаки для выгодных сделок. Помогаем выбрать квартиру, рассчитать ипотеку, проверить документы и избежать ошибок при сделках с жильем. Актуальные статьи для покупателей, арендаторов и инвесторов.

  954. ClaytonAnofs

    Покупка недвижимости и ипотека https://konsta-ovk.ru что нужно знать? Разбираем выбор жилья, условия кредитования, оформление документов и юридические аспекты. Узнайте, как выгодно купить квартиру и избежать ошибок!

  971. data center cabling

    Hi! This is kind of off topic but I need some help from an established blog. Is it difficult to set up your own blog? I’m not very techincal but I can figure things out pretty quick. I’m thinking about setting up my own but I’m not sure where to begin. Do you have any ideas or suggestions? Cheers

Leave a Reply

Your email address will not be published. Required fields are marked *

Eu Ai act
First Rules of the EU AI Act Come into Effect: What Does it Mean?
Tsaaro Consulting

First Rules of the EU AI Act Come into Effect: What Does it Mean?

The evolving digital landscape in the 21st century have placed a challenge for governments and organizations as they attempt to …

•
March 7, 2025
Digital Personal Data Protection (DPDP) Act
Exemptions Under the Digital Personal Data Protection (DPDP) Act, 2023  
Tsaaro Consulting

Exemptions Under the Digital Personal Data Protection (DPDP) Act, 2023  

Introduction  The Digital Personal Data Protection (DPDP) Act, 2023, and the Digital Personal Data Protection Rules, 2025 establish a comprehensive …

•
February 27, 2025
cybersecurity,
WHAT DRIVES CYBERSECURITY: A COMPREHENSIVE OVERVIEW 
Tsaaro Consulting

WHAT DRIVES CYBERSECURITY: A COMPREHENSIVE OVERVIEW 

In today’s interconnected world, cybersecurity plays a crucial role in protecting our digital lives. From protecting personal data to safeguarding …

•
February 21, 2025
Transfer Impact Assessments
Understand Transfer Impact Assessments: Insights from CNIL’s Practical Guide 
Tsaaro Consulting

Understand Transfer Impact Assessments: Insights from CNIL’s Practical Guide 

Introduction  A Transfer Impact Assessment (TIA) is a critical evaluation conducted under the General Data Protection Regulation (GDPR) to assess …

•
February 20, 2025
Draft DPDP Rules
The DPDP Act, 2023 and the Draft DPDP Rules, 2025: What Do They Mean for India’s AI Start-Ups?
Tsaaro Consulting

The DPDP Act, 2023 and the Draft DPDP Rules, 2025: What Do They Mean for India’s AI Start-Ups?

Introduction The Digital Personal Data Protection Act (DPDPA), 2023 and the Draft DPDP Rules, 2025 have ushered in a new …

•
February 12, 2025
Recent Comments

SHARE THIS POST

Would you like to read regular updates from Tsaaro.
Subscribe to our newsletter

Our Latest Blogs

Read what the latest hapennings in the cyber world are and learn what the
experts have to say about them

© 2024 Tsaaro Consulting. All rights reserved.
Linkedin Instagram Youtube

About Tsaaro

Resources

Other Links

Tsaaro Netherlands Office

Regus Schiphol Rijk Beech Avenue 54-62, Het Poortgebouw, Amsterdam, 1119 PW, Netherlands

Tsaaro Pune Office

Tech Centre, Rajiv Gandhi Infotech Park, Hinjewadi, Pune, Maharashtra

Tsaaro Noida Office

302, Tower C, ATS Bouquet, Noida Sector – 132, Uttar Pradesh, India

Tsaaro Bengaluru Office I

Manyata, Embassy Business Park, Outer Ring Road, Bengaluru, Karnataka

Tsaaro Bengaluru Office II

Second State, CMH Road, Indiranagar, Bengaluru, Karnataka

Call Our Experts:

+91 95577 22103

small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png

We’d love to help your organization achieve your Data Protection goals!

Schedule a complimentary consultation with our Team of Experts.