From today, a new framework is in place for protecting the fundamental rights of EU citizens whose personal data is transferred to the United States.
The EU-U.S. Privacy Shield
- creates strong data protection standards, protecting the fundamental rights of anyone in the EU whose personal data is transferred to the United States;
- gives legal clarity to businesses about their obligations when carrying out transatlantic data transfers;
- gives safeguards on government access and provides for easier redress for individuals in case of complaints;
- will help restore the trust of consumers when their data is transferred across the Atlantic.
Data flows between our two continents are essential to our society and economy and we now have a robust framework ensuring these transfers take place in the best and safest conditions. The Commission has worked together with the European data protection authorities, the European Parliament, Member States and the U.S. to put in place the highest standards to protect Europeans' personal data.
Under the new arrangement, the U.S. Department of Commerce will conduct regular updates and reviews of participating companies, to ensure that they follow the rules. The U.S. has given the EU assurances that the access of public authorities to data for law enforcement and national security is subject to clear limitations, safeguards and oversight mechanisms. Everyone in the EU will benefit for the first time from redress mechanisms in this area. The U.S. has ruled out indiscriminate mass surveillance on personal data transferred under this arrangement, and any citizen who considers that their data has been misused will benefit from accessible and affordable dispute resolution mechanisms.Related Links