back to article Two years later and it still sucks: Privacy Shield progress panned

More than two years in, Privacy Shield still isn't fit for purpose – and data protection experts and politicians want to see a bigger commitment ahead of its second annual review. The agreement, rushed through in the summer of 2016 after its predecessor Safe Harbor was scrapped, governs data flows between the European Union …

  1. Anonymous Coward
    Anonymous Coward

    Did EU take into account the CLOUD Act?

    The Register should ask Buttarelli if Privacy Shield can still stand in face of it.

    It gives access to EU citizen data to US authorities even when they are stored on EU soil, with little oversight, but from US courts which are the same that allowed bulk collection of data.

    1. big_D Silver badge

      Re: Did EU take into account the CLOUD Act?

      It is great, any company operating in Europe and the USA will be in breech of EU law is they comply with the CLOUD Act and if they don't they will be in breech of US law.

  2. Spanners Silver badge

    "Less progress has been made than expected"

    I find that phrase suspect. Surely they expected little to zero progress?

    They would have been better saying something like "a satisfactory amount of progress has not been made".

  3. Len
    Headmaster

    To be expected

    To be honest, I don't think anybody expected Privacy Shield to last very long. Even the authors will have known it was a stopgap.

    The European Commission had to quickly draft something they could present to the Council and Parliament to replace Safe Harbour to prevent half of the online economy between the EU and the US to collapse pretty suddenly. The writing may have been on the wall with the growing unease about Safe Harbour but it was the European Court of Justice strike down that came as a bit of a surprise. The surprise was not necessarily that they struck it down, the surprise was that they did it on the basis of the Charter of Fundamental Rights of the European Union. That charter defines the fundamental rights of EU Citizens and they trump everything else.

    That meant there was no way to change laws to make them compliant with the existing privacy framework, Safe Harbour. They had to find another way, make the privacy framework compliant with the Charter. Privacy Shield is just the first step on that path, definitely not the destination.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon