Transatlantic data transfers Image
Guiding the way: Safe Harbor had been the main basis for the legal transfer of data to the US for more than 4,000 European companies. Photo: Enjoylife2/iStock

European companies can only respire a little bit: A US Senate penal has passed the amended Judicial Redress Act on Thursday and thereby cleared the way to a new data transfer agreement. The Judicial Redress Act will extend the privacy rights of US citizens to EU citizens. However, the European data protection authorities have not yet arrived at a consensus on legal data transfers to the US – therefore, it seems like Safe Harbor II is still far off.

It was already in October that the European Court of Justice (ECJ) ruled that personal data may no longer be transferred from the EU to the US based on the Safe Harbor Agreement due to lacking US data protection.

Safe Harbor had been the main basis for the legal transfer of data to the US for more than 4,000 European companies. Now, the companies have to use alternative legal instruments. First, they can base their data transfers on standard contractual clauses issued by the European Commission. Second, they can use Corporate Binding Rules for data exchange within the company.

The European data protection authorities have granted the companies a reprieve until the end of January to adapt their data transfers to these alternatives. It is also until the end of January that the authorities want to clarify how the ECJ ruling may affect these specific alternatives. Furthermore, the US and the European Commission have promised to provide a new Safe Harbor agreement until this date.

However, the deadlines will likely not be met. The victims are the companies – they will have to operate in a legal limbo from next week on. Therefore, the European data protection authorities must quickly agree on a common position on the future of Safe Harbor. This position should at least transitionally maintain the standard contractual clauses and the Corporate Binding Rules to allow data transfers to the US. In the medium term, however, new rules and reforms are conceivable and necessary on both sides of the Atlantic.

Furthermore, it is important that Europe takes on a strong, consistent attitude in the matter. Only then the balancing act in the Safe Harbor negotiations with the US can succeed, which is crucial for the future of Europe as a business location. This balancing act consists in nothing less than balancing the European fundamental right to the protection of personal data with the requirements of a globally networked economy.

Contact

Digital Business Location
IW News, 25 February 2016

Digital Business Location Slow catch-upArrow

Germany is far from being the leading European nation in digitization. In a recent ranking of the European Commission, Germany occupies rank 9 of the 28 member states. Compared to last year the Federal Republic, however, has caught up: Especially companies now take advantage of digitization. more

Copyright protection
IW News, No. 6 of 11 February 2016

Copyright protection National, global, digitalArrow

In light of increasing digitalisation, the EU is facing a reform in the area of copyright protection. This is no simple matter. After all, each country has its own regulations in this area; and yet providers of texts, images, films, music and software have other interests than consumers do. more

Online platforms
IW News, No. 77 of 21 December 2015

Online platforms Europe needs to strike a balanceArrow

More and more goods, services and data are traded on online platforms. This results in new challenges that regulation so far has not kept pace with. The European Union needs to change this quickly, according to a new analysis done by experts from the Cologne Institute for Economic Research (IW). What is needed now is a balance between legal certainty and fostering innovation. more