Transatlantic data transfers Image
Guiding the way: Safe Harbor had been the main basis for the legal transfer of data to the US for more than 4,000 European companies. Photo: Enjoylife2/iStock

European companies can only respire a little bit: A US Senate penal has passed the amended Judicial Redress Act on Thursday and thereby cleared the way to a new data transfer agreement. The Judicial Redress Act will extend the privacy rights of US citizens to EU citizens. However, the European data protection authorities have not yet arrived at a consensus on legal data transfers to the US – therefore, it seems like Safe Harbor II is still far off.

It was already in October that the European Court of Justice (ECJ) ruled that personal data may no longer be transferred from the EU to the US based on the Safe Harbor Agreement due to lacking US data protection.

Safe Harbor had been the main basis for the legal transfer of data to the US for more than 4,000 European companies. Now, the companies have to use alternative legal instruments. First, they can base their data transfers on standard contractual clauses issued by the European Commission. Second, they can use Corporate Binding Rules for data exchange within the company.

The European data protection authorities have granted the companies a reprieve until the end of January to adapt their data transfers to these alternatives. It is also until the end of January that the authorities want to clarify how the ECJ ruling may affect these specific alternatives. Furthermore, the US and the European Commission have promised to provide a new Safe Harbor agreement until this date.

However, the deadlines will likely not be met. The victims are the companies – they will have to operate in a legal limbo from next week on. Therefore, the European data protection authorities must quickly agree on a common position on the future of Safe Harbor. This position should at least transitionally maintain the standard contractual clauses and the Corporate Binding Rules to allow data transfers to the US. In the medium term, however, new rules and reforms are conceivable and necessary on both sides of the Atlantic.

Furthermore, it is important that Europe takes on a strong, consistent attitude in the matter. Only then the balancing act in the Safe Harbor negotiations with the US can succeed, which is crucial for the future of Europe as a business location. This balancing act consists in nothing less than balancing the European fundamental right to the protection of personal data with the requirements of a globally networked economy.

Contact

Event
Event, 6 July 2016

Expert Exchange Recovery and decline in the Eurozone – Southern Europe in focusArrow

The Cologne Institute for Economic Research (IW Köln) and the German Institute for International and Security Affairs - Stiftung Wissenschaft und Politik (SWP) organise an expert exchange to discuss the ongoing effects of the economic situation in Southern Europe. more

Michael Hüther in United Europe
IW News, 30 June 2016

Michael Hüther in United Europe Time to ConsolidateArrow

The EU institutions are sufficiently strong to contain any potential spill-over from Brexit to vulnerable member states, says the Cologne Institute's director Michael Hüther in a guest commentary for United Europe. more

Brexit
IW News, 24 June 2016

Brexit There are only losersArrow

The United Kingdom’s exit from the European Union is a historic break and a tremendous loss for everyone concerned. The British will lose importance on the stage of world policy and, finally, their access to the world’s largest single market. At the same time, the European Union will have to accept the loss of its most important financial centre and, with it, the EU’s gateway to the Commonwealth and the United States. more