US relations with the European Union took another hit earlier this month, when the European Parliament voted to suspend Privacy Shield, the agreement between the US and the EU that allows companies to transfer the personal information of EU citizens out of the EU to US companies that have promised to adhere to the General Data Protection Regulation (GDPR). Between the Facebook-Cambridge Analytica scandal, the passage of the CLOUD Act, and the Russian hack (sorry–alleged Russian hack) of the 2016 election, the EP felt that Privacy Shield did not provide an adequate level of protection for EU citizens. The US has until September 1 to become compliant.
The good news is that the EP’s concerns largely relate to inadequate protections on the part of the US government, as opposed to any shortcomings with the scheme itself. This means that if the US addresses all of the EP’s concerns, those entities that have already applied for and been accepted into the Privacy Shield program will need to do very little to remain compliant (other than fully comply with the GDPR, but that’s another issue altogether).
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
LexisNexis® and Bloomberg Law are third party online distributors of the broad collection of current and archived versions of ALM's legal news publications. LexisNexis® and Bloomberg Law customers are able to access and use ALM's content, including content from the National Law Journal, The American Lawyer, Legaltech News, The New York Law Journal, and Corporate Counsel, as well as other sources of legal information.
For questions call 1-877-256-2472 or contact us at [email protected]