The Cyber Security Review | Friday, October 14, 2022
US President Joe Biden signed a new executive order to implement a new framework to preserve the privacy of personal data that is exchanged between the US and EU.
FREMONT, CA: Max Schrems, a privacy advocate and lawyer from Austria, has cautioned decision-makers in the European Union and the United States that President Biden's executive order, which was issued past and outlined new guidelines for how the US and Europe share peoples' private personal information, can not go as far as the EU.
A new executive order to establish a new framework to protect the privacy of personal data shared between the US and EU was signed by US President Joe Biden.
Stay ahead of the industry with exclusive feature stories on the top companies, expert insights and the latest news delivered straight to your inbox. Subscribe today.
According to US Commerce Secretary Gina Raimondo, the executive action states that it is the climax of cooperative efforts to restore trust and stability to transatlantic data flows and will safeguard the protection of personal information belonging to EU citizens.
The previous EU-US Privacy Shield framework was declared invalid as a data transfer mechanism under EU law by the Court of Justice of the European Union (CJEU) in July 2020, leading to a large gap in data safeguards on both sides of the Atlantic that the new framework aims to close.
The US's ability to monitor European data transferred before the system was found to be excessive by the court. The CJEU's ruling states that US monitoring must be reasonable following Article 52 of the Charter of Fundamental Rights (CFR) and must allow access to judicial remedies following Article 47 CFR.
European concerns about potential US intelligence agency spying are intended to be allayed by Privacy Shield 2.0. The US was committed to adopting new safeguards to ensure that signals intelligence activities are necessary and appropriate in the pursuit of defined national security objectives, the White House declared in a fact sheet.
According to a news statement from the White House, Biden's executive order restricts the kinds of signals intelligence that US spy services can collect and hides information from various layers of limitations, including ensuring that only closely focused data is obtained.
The new structure also creates a Data Protection Review Court made up of non-government workers to hear complaints from EU citizens, but only after those concerns have been reviewed by the civil liberties team at the Office of the Director of National Intelligence.
Now that it has been transmitted to Brussels, President Biden's executive order will be subject to a maximum of six months of review by EU officials. Although privacy advocates anticipate challenging the decision in court, a new data agreement is scheduled to be finished in March 2023.
Campaigners assert that the executive order simply duplicates the text of European legislation by adding terms like proportionate and necessary, making no fundamental changes. According to Schrems, the new order looks to fail in some significant areas. He asserts that although the new agreement may have updated some phrasings, the EU and US still don't appear to be utilising the same meanings for terms like proportionate.
Additionally, there is little indication that US mass monitoring will actually change. The CJEU's definition will ultimately prevail, thus destroying any future EU decisions. Once, the European Commission is ignoring US law to continue spying on Europeans.
More in News