For over a year, officials on either side of the Atlantic have been hashing out a deal to replace the so-called Privacy Shield, an arrangement allowing firms to share Europeans’ data to the U.S.
Privacy Shield was invalidated in July 2020, striking a blow to Facebook and other companies that had relied on the mechanism for their EU-U.S. data flows. The EU’s top court sided with Max Schrems, an Austrian privacy activist who argued the existing framework did not protect Europeans from U.S. surveillance.
The new agreement will “enable predictable and trustworthy data flows between the EU and US, safeguarding privacy and civil liberties,” European Commission President Ursula von der Leyen said Friday, without offering much additional detail on how it will work.
News of the agreement will offer some respite for Meta and a slew of other firms which have faced legal uncertainty over how they move data across borders in the wake of the decision to scrap Privacy Shield. Meta has even suggested it may have to shut down Facebook and Instagram in Europe over the issue.
“For companies with a presence in both the EU and the US, the possibility to transfer personal data safely across the Atlantic and in compliance with applicable data protection rules is business-critical,” said Guillaume Couneson, a data protection partner at law firm Linklaters.
However, Couneson warned it was too early to say whether the new agreement stands the test of time. Privacy Shield itself was the replacement for Safe Harbor, an earlier EU-U.S. data pact.
“This new solution will have to withstand the scrutiny of the supervisory authorities and the privacy activists that brought down the two previous ones,” he said.
The deal was announced alongside a separate agreement with the U.S. to provide energy to Europe as the Russian invasion of Ukraine threatens to disrupt the continent’s energy supplies.