{"id":2096,"date":"2022-08-24T15:07:53","date_gmt":"2022-08-24T13:07:53","guid":{"rendered":"https:\/\/www.privacy-advice.com\/aktuelles\/eu-us-privacy-shield-adopted-applicable-as-of-01-08-2016\/"},"modified":"2022-09-20T08:00:03","modified_gmt":"2022-09-20T06:00:03","slug":"eu-us-privacy-shield-adopted-applicable-as-of-01-08-2016","status":"publish","type":"aktuelles","link":"https:\/\/www.privacy-advice.com\/en\/news\/eu-us-privacy-shield-adopted-applicable-as-of-01-08-2016\/","title":{"rendered":"EU-US Privacy Shield adopted &#8211; Applicable as of 01.08.2016"},"content":{"rendered":"<div class=\"container con--para\">\n<p>The EU-US Privacy Shield was adopted by the European Commission on July 12, 2016. It is to enter into force on August 1, 2016 and replace the former Safe Harbor Agreement, which was declared invalid by the European Court of Justice (ECJ) (judgment of October 6, 2015 &#8211; Case C-362\/14). The new Privacy Shield is intended to implement the requirements of the ECJ as far as possible and provide companies with a new option for data transfers to the USA. However, there continues to be much criticism of the effectiveness of the regulations and the lack of implementation of the judicial requirements.<\/p>\n<\/div><div class=\"container con--para\">\n<p>The EU-US Privacy Shield is a step forward compared to the former Safe Harbor agreement, whose effectiveness could hardly be verified and which in many cases had not been implemented properly. The new Privacy Shield addresses some guidance from the ECJ and criticism from regulators. Among other things, it is to be welcomed that the Privacy Shield strongly emphasizes the following principles:<\/p>\n<\/div><div class=\"container con--list\">\n<ul class=\"wp-block-list\"><li><strong>Strengthened obligations to<\/strong> U.S. companies with respect to processing of personal data, particularly through periodic reviews of participating U.S. companies.<\/li><li><strong>Protection of individual rights<\/strong> by exercising data subjects&#8217; rights through free dispute resolution mechanisms, a complaints procedure with national data protection authorities, and the establishment of an ombudsperson.<\/li><li><strong>Annual<\/strong> effectiveness <strong>review mechanism<\/strong> by EU Commission and U.S. Department of Commerce.<\/li><\/ul>\n<\/div><div class=\"container con--para\">\n<p>In this respect, the new agreement is undoubtedly a step forward compared to Safe Harbor. Since this is an appropriateness decision of the EU Commission, it can be made in accordance with the provisions of the German Commercial Code. Art. 25 par. 6 EU Data Protection Directive (GDPR) (in future Art. 45(1) GDPR) are currently used. However, there is a risk that the ECJ will review the EU-US Privacy Shield and conclude that it is invalid again.<\/p>\n<\/div><div class=\"container con--para\">\n<p>One particular criticism of the agreement is that access by U.S. security authorities to the personal data of EU citizens is only slightly restricted. The restriction on access by security authorities is limited to letters and insurance policies from the USA. Therefore, one of the ECJ&#8217;s main criticisms remains inadequately addressed.<\/p>\n<\/div><div class=\"container con--heading\">\n<h2 class=\"wp-block-heading\">Our recommendation on the EU-US Privacy Shield<\/h2>\n<\/div><div class=\"container con--para\">\n<p>It is to be welcomed that a successor to Safe Harbor was negotiated, in which many points of criticism on the part of the supervisory authorities and the European Court of Justice are taken up. Nevertheless, we fear that the European Court of Justice, in a review of the Privacy Shield, will regard the requirements made in the Safe Harbor ruling as not having been complied with, in particular due to the continued barely restricted access by U.S. security authorities.<\/p>\n<\/div><div class=\"container con--para\">\n<p>We see a great risk that the EU-US Privacy Shield will again be declared invalid by the European Court of Justice in a few years or that the data protection supervisory authorities will not recognize it. Our recommendation is therefore the same as when the Safe Harbor agreement was in force: as far as possible, companies should base their data transfers to the U.S. on EU standard contractual clauses or other mechanisms under the General Data Protection Regulation (for example, certifications or Code of Conducts).<\/p>\n<\/div><div class=\"container con--para\">\n<p>We will be happy to advise you on the legally compliant design of data transfers to the USA. Please contact: <a href=\"https:\/\/www.privacy-advice.com\/en\/about-us\/our-employees\/dr-stefan-drewes\/\">Dr. Stefan Drewes<\/a>, <a href=\"mailto:drewes@privacy-advice.com\">drewes@privacy-advice.com,<\/a> 0228-90248070.<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>The EU-US Privacy Shield was adopted by the European Commission on July 12, 2016. It is to enter into force on August 1, 2016 and replace the former Safe Harbor Agreement, which was declared invalid by the European Court of Justice (ECJ) (judgment of October 6, 2015 &#8211; Case C-362\/14). The new Privacy Shield is [&hellip;]<\/p>\n","protected":false},"parent":0,"template":"","class_list":["post-2096","aktuelles","type-aktuelles","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>EU-US Privacy Shield adopted - Applicable as of 01.08.2016 &#8211; DPA Drewes Privacy Advice<\/title>\n<meta name=\"description\" content=\"The EU-US Privacy Shield was adopted by the European Commission on July 12, 2016. It is scheduled to come into force on August 1, 2016.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.privacy-advice.com\/de\/news\/eu-us-privacy-shield-beschlossen-und-ab-oktober-2016-einsetzbar\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"EU-US Privacy Shield adopted - Applicable as of 01.08.2016 &#8211; DPA Drewes Privacy Advice\" \/>\n<meta property=\"og:description\" content=\"The EU-US Privacy Shield was adopted by the European Commission on July 12, 2016. It is scheduled to come into force on August 1, 2016.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.privacy-advice.com\/de\/news\/eu-us-privacy-shield-beschlossen-und-ab-oktober-2016-einsetzbar\/\" \/>\n<meta property=\"og:site_name\" content=\"DPA Drewes Privacy Advice\" \/>\n<meta property=\"article:modified_time\" content=\"2022-09-20T06:00:03+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/news\\\/eu-us-privacy-shield-beschlossen-und-ab-oktober-2016-einsetzbar\\\/\",\"url\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/news\\\/eu-us-privacy-shield-beschlossen-und-ab-oktober-2016-einsetzbar\\\/\",\"name\":\"EU-US Privacy Shield adopted - Applicable as of 01.08.2016 &#8211; DPA Drewes Privacy Advice\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/#website\"},\"datePublished\":\"2022-08-24T13:07:53+00:00\",\"dateModified\":\"2022-09-20T06:00:03+00:00\",\"description\":\"The EU-US Privacy Shield was adopted by the European Commission on July 12, 2016. It is scheduled to come into force on August 1, 2016.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/news\\\/eu-us-privacy-shield-beschlossen-und-ab-oktober-2016-einsetzbar\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/news\\\/eu-us-privacy-shield-beschlossen-und-ab-oktober-2016-einsetzbar\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/news\\\/eu-us-privacy-shield-beschlossen-und-ab-oktober-2016-einsetzbar\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/www.privacy-advice.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"News\",\"item\":\"https:\\\/\\\/www.privacy-advice.com\\\/en\\\/news\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"EU-US Privacy Shield adopted &#8211; Applicable as of 01.08.2016\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/#website\",\"url\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/\",\"name\":\"DPA Drewes Privacy Advice\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/#organization\",\"name\":\"DPA Drewes Privacy Advice GmbH\",\"url\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.privacy-advice.com\\\/wp-content\\\/uploads\\\/dpa-logo.svg\",\"contentUrl\":\"https:\\\/\\\/www.privacy-advice.com\\\/wp-content\\\/uploads\\\/dpa-logo.svg\",\"width\":1,\"height\":1,\"caption\":\"DPA Drewes Privacy Advice GmbH\"},\"image\":{\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"EU-US Privacy Shield adopted - Applicable as of 01.08.2016 &#8211; DPA Drewes Privacy Advice","description":"The EU-US Privacy Shield was adopted by the European Commission on July 12, 2016. It is scheduled to come into force on August 1, 2016.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.privacy-advice.com\/de\/news\/eu-us-privacy-shield-beschlossen-und-ab-oktober-2016-einsetzbar\/","og_locale":"en_US","og_type":"article","og_title":"EU-US Privacy Shield adopted - Applicable as of 01.08.2016 &#8211; DPA Drewes Privacy Advice","og_description":"The EU-US Privacy Shield was adopted by the European Commission on July 12, 2016. It is scheduled to come into force on August 1, 2016.","og_url":"https:\/\/www.privacy-advice.com\/de\/news\/eu-us-privacy-shield-beschlossen-und-ab-oktober-2016-einsetzbar\/","og_site_name":"DPA Drewes Privacy Advice","article_modified_time":"2022-09-20T06:00:03+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.privacy-advice.com\/de\/news\/eu-us-privacy-shield-beschlossen-und-ab-oktober-2016-einsetzbar\/","url":"https:\/\/www.privacy-advice.com\/de\/news\/eu-us-privacy-shield-beschlossen-und-ab-oktober-2016-einsetzbar\/","name":"EU-US Privacy Shield adopted - Applicable as of 01.08.2016 &#8211; DPA Drewes Privacy Advice","isPartOf":{"@id":"https:\/\/www.privacy-advice.com\/de\/#website"},"datePublished":"2022-08-24T13:07:53+00:00","dateModified":"2022-09-20T06:00:03+00:00","description":"The EU-US Privacy Shield was adopted by the European Commission on July 12, 2016. It is scheduled to come into force on August 1, 2016.","breadcrumb":{"@id":"https:\/\/www.privacy-advice.com\/de\/news\/eu-us-privacy-shield-beschlossen-und-ab-oktober-2016-einsetzbar\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.privacy-advice.com\/de\/news\/eu-us-privacy-shield-beschlossen-und-ab-oktober-2016-einsetzbar\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.privacy-advice.com\/de\/news\/eu-us-privacy-shield-beschlossen-und-ab-oktober-2016-einsetzbar\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/www.privacy-advice.com\/en\/"},{"@type":"ListItem","position":2,"name":"News","item":"https:\/\/www.privacy-advice.com\/en\/news\/"},{"@type":"ListItem","position":3,"name":"EU-US Privacy Shield adopted &#8211; Applicable as of 01.08.2016"}]},{"@type":"WebSite","@id":"https:\/\/www.privacy-advice.com\/de\/#website","url":"https:\/\/www.privacy-advice.com\/de\/","name":"DPA Drewes Privacy Advice","description":"","publisher":{"@id":"https:\/\/www.privacy-advice.com\/de\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.privacy-advice.com\/de\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.privacy-advice.com\/de\/#organization","name":"DPA Drewes Privacy Advice GmbH","url":"https:\/\/www.privacy-advice.com\/de\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privacy-advice.com\/de\/#\/schema\/logo\/image\/","url":"https:\/\/www.privacy-advice.com\/wp-content\/uploads\/dpa-logo.svg","contentUrl":"https:\/\/www.privacy-advice.com\/wp-content\/uploads\/dpa-logo.svg","width":1,"height":1,"caption":"DPA Drewes Privacy Advice GmbH"},"image":{"@id":"https:\/\/www.privacy-advice.com\/de\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.privacy-advice.com\/en\/wp-json\/wp\/v2\/aktuelles\/2096","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.privacy-advice.com\/en\/wp-json\/wp\/v2\/aktuelles"}],"about":[{"href":"https:\/\/www.privacy-advice.com\/en\/wp-json\/wp\/v2\/types\/aktuelles"}],"version-history":[{"count":3,"href":"https:\/\/www.privacy-advice.com\/en\/wp-json\/wp\/v2\/aktuelles\/2096\/revisions"}],"predecessor-version":[{"id":2143,"href":"https:\/\/www.privacy-advice.com\/en\/wp-json\/wp\/v2\/aktuelles\/2096\/revisions\/2143"}],"wp:attachment":[{"href":"https:\/\/www.privacy-advice.com\/en\/wp-json\/wp\/v2\/media?parent=2096"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}