Say Hello to the EU-US Privacy Shield Framework
In October 2015, the European Court of Justice invalidated the International Safe Harbor Privacy Principles which were established in 2000. The Safe Harbor Privacy Principles allowed certified U.S. companies to receive personal data of EU residents in compliance with EU cross-border transfer rules. While many rejoiced the invalidation, numerous legal experts predicted that the invalidated Safe Harbor Privacy Principles would quickly be replaced. The legal experts were right. The EU-US Privacy Shield is a framework for transatlantic exchanges of personal data for commercial purposes between the European Union and the United States. After more than two years of negotiations, on July 12, 2016, the framework was adopted by the European Commission and went into effect the same day. View the full text of the EU-US Privacy Shield framework. The U.S. Department of Commerce Secretary, Penny Pritzker and EU Justice Commissioner Věra Jourová announced the deal together in Brussels. Jourová was quick to point out that the EU-US Privacy Shield is fundamentally different from the previous Safe Harbor arrangement because of the annual joint review, which allows the EU to address any issues as they arise. Jourová went on to say “it brings stronger data protection standards that are better enforced,…