The EU and the US agree to a new data transfer deal, which is likely to face a legal challenge given EU judges threw out two prior pacts over privacy concerns
they even forgot to rename the link in the footer: https://www.dataprivacyframework.gov/ ... https://twitter.com/... [image] Eric Mamer / @mamereric : Today we adopted the 🇪🇺 EU-US 🇺🇸 Data Privacy Framework to ensure adequate protection for personal date transferred to the US. It introduces new binding safeguards: 🔐limits US public authorities ⚖️ new Data Protection Review Court 💼obligations for US companies [image] Caitlin Fennessy / @cdfen : EU-U.S. Data Privacy Framework receives European Commission adequacy determination! https://commission.europa.eu/ ... What you should know now: 1/4 [image] Forums: r/worldnews : EU and US reach a deal to let data flow across the Atlantic r/gdpr : European Commission adopts new adequacy decision for safe and trusted EU-US data flows r/privacy : EU signs off on data transfers deal with US. The agreement ends years of legal limbo and revives free transatlantic digital exchanges.
BloombergStephanie Bodoni
Context & Ripple Effects
The framework formalizes the arrangement outlined in the preceding EU-US transfer deal after the earlier Privacy Shield regime had been approved to facilitate corporate data flows. Its core significance is durability: two earlier arrangements had already been invalidated over privacy concerns.
The Commission's adequacy decision adds binding safeguards, including limits on US public authorities and a Data Protection Review Court, but the history of the prior pact leaves the new mechanism exposed to court scrutiny.
First-order effects
Organizations transferring Europeans' personal data to the US gain a Commission-approved framework to rely on, subject to the framework's obligations.
US authorities and participating companies face the newly specified safeguards and redress mechanism; privacy advocates have a defined target for a fresh legal challenge.
Second-order effects
Companies that had been managing uncertainty after the previous framework was declared illegal can standardize transfers around the new arrangement, while preparing contingency measures if litigation succeeds.
A challenge will test whether the new surveillance limits and review court address the deficiencies that undermined the earlier Privacy Shield framework, shaping how much legal certainty the adequacy decision delivers.
Third-order effects
The episode reinforces that transatlantic data-transfer rules are becoming an ongoing contest between commercial interoperability and European privacy-law constraints, rather than a one-time diplomatic settlement.
If successive adequacy arrangements remain vulnerable to invalidation, firms may increasingly treat transfer governance and jurisdictional safeguards as a persistent operating requirement.
The trend: Cross-border digital commerce is being governed through more formal privacy safeguards, with courts retaining a decisive role in whether political data-transfer deals endure.
The EU Commission just presented a “new” “Trans-Atlantic Data Privacy Framework” #TADPF with the USA - which is largely a copy of #PrivacyShield. noyb will challenge the decision. https://noyb.eu/...
So today @EU_Justice is announcing #SafeHarbor 3.0! 'After a “Harbor”, “Umbrella” and “#PrivacyShield” it's now a “#Framework”, but guess what: it is largely a copy of the old principles! #WhatCouldGoWrong We got our picture ready - more at 15:30 on https://t.co/...! 😉 [image]
International data flows underpin the modern economy. We welcome the new Data Privacy Framework, which will safeguard the goods & services relied on by people and businesses on both sides of the Atlantic. Congratulations to all involved! https://ec.europa.eu/...
After 3 years post-Schrems II, we have an EU decision that will give some much needed certainly to transatlantic data flows. This was an exercise in true grit but well worth it for a qualitatively different 🇪🇺🇺🇸 data environment. 💪🦾 https://twitter.com/...
The fitting hashtag fro the “Trans-Atlantic Data Privacy Framework” is apparently #TADPF “Tad-Pffff” seems to be the mix of ("Tadaa" 🥳) and the realization you come to when reading the details of the underlying legal details ("Pffff" 😤)
We adopted our adequacy decision for the 🇪🇺🇺🇸Data Privacy Framework, following the agreement I had reached with @POTUS last year. I welcome the important commitments taken by the US. So that citizens can trust that their data is safe and so we can deepen economic ties.
Safe to say: the framework will be challenged by the end of this summer. At this point, I do read the EU-US data transfers saga as a modern times Odyssey. What matters is that along the journey we get better frameworks to protect fundamental rights, democracy and the rule of law.…
4/ With the new adequacy decision, businesses can breathe for a while. But if the EU's highest court invalidates the adequacy decision, this could be a mere delay of a real crisis. So what are the legal arguments for and against upholding the decision?
7/ Key question is whether ‘bulk data collection’ by US intelligence authorities can be squared with ‘adequacy’ with EU law. The EU Commission says ‘yes,’ relying on a distinction between domestic and international surveillance and on it being limited, not ‘mass surveillance.’
I am happy to announce that today the @EU_Commission has adopted a new adequacy decision for safe and trusted EU-US data flows. It will protect the personal data of European citizens and bring legal certainty to companies on both sides of the Atlantic. https://ec.europa.eu/... [i…
Protecting of our personal data grows in importance in our day-to-day lives. Today's adequacy decision for safe and trusted 🇪🇺-🇺🇸 data flows ensure that Europeans' data travels safely, wherever they go. 👉https://ec.europa.eu/... [image]
The “new” EU-US Data Privacy Framework is sooo much a 1:1 copy of the #PrivacyShield — they even forgot to rename the link in the footer: https://www.dataprivacyframework.gov/ ... https://twitter.com/... [image]
Today we adopted the 🇪🇺 EU-US 🇺🇸 Data Privacy Framework to ensure adequate protection for personal date transferred to the US. It introduces new binding safeguards: 🔐limits US public authorities ⚖️ new Data Protection Review Court 💼obligations for US companies [image]
EU-U.S. Data Privacy Framework receives European Commission adequacy determination! https://commission.europa.eu/ ... What you should know now: 1/4 [image]