The United States and the European Commission have committed to a new Data Privacy Framework, designed to foster trans-Atlantic data flows and address the concerns raised by the Court of Justice of the European Union when it struck down in 2020 the Commission’s adequacy decision underlying the EU-U.S. Privacy Shield framework.
According to this statement by the White House, the new data privacy framework will provide vital benefits to citizens on both sides of the Atlantic. For EU individuals, the deal includes new, high-standard commitments regarding the protection of personal data. For citizens and companies on both sides of the Atlantic, the deal will enable the continued flow of data that underpins more than $1 trillion in cross-border commerce every year and will enable businesses of all sizes to compete in each other’s markets. It is the culmination of more than a year of detailed negotiations between the EU and the U.S. following the 2020 decision by the Court of Justice of the European Union ruling that the prior EU-U.S. framework, known as Privacy Shield, did not satisfy EU legal requirements.
As discussed in The National Law Review, the new data privacy framework, being referred to as “Privacy Shield 2.0”, would potentially revive the Privacy Shield and allow EU to US data flows for compliant companies. Few details have emerged on the terms of the agreement or how different its terms would be from the original Privacy Shield, which was invalidated after a challenge from privacy activist and lawyer Max Schrems in the “Schrems II” decision. Schrems had also previously successfully challenged the Safe Harbor framework before that, which led to the original Privacy Shield agreement to replace it.
