{"id":36244,"date":"2020-07-23T19:13:11","date_gmt":"2020-07-23T19:13:11","guid":{"rendered":"http:\/\/6a7f0136-5927-4742-bc1d-8f69c0cca157"},"modified":"2020-07-23T19:13:11","modified_gmt":"2020-07-23T19:13:11","slug":"its-time-to-say-goodbye-to-the-eu-us-privacy-shield","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/its-time-to-say-goodbye-to-the-eu-us-privacy-shield\/","title":{"rendered":"It\u2019s time to say goodbye to the EU-US Privacy Shield"},"content":{"rendered":"
<\/div>\n

In 2000, the European Commission (EC) introduced Safe Harbor<\/a>. It was a principles-based, voluntary framework to allow companies to transfer personal data of European residents to the US. And Austrian law student Maximilian Schrems took Facebook to court claiming that, once his data reached US soil, privacy protection<\/a><\/span> faded.  <\/p>\n

Five years later, the European Court of Justice (ECJ) declared<\/a> Safe Harbor invalid. To replace it, the EC issued the EU-US Privacy Shield<\/a>. The new framework was supposed to provide additional protection to EU citizens’ data with the creation of new safeguards, such as the Data Protection Ombudsman, and the “promise” that US surveillance would be limited. Today, the ECJ decided that these expectations have not been met and invalidated the privacy shield<\/a>. <\/p>\n

About 5,000 companies currently rely on the framework to transfer personal data to the US, and these transfers contribute to transatlantic trade, which is worth about \u00a35.6 trillion<\/a>. To keep these vital transfers flowing while complying with the ECJ’s ruling, security, and risk (S&R) pros must take these steps: <\/p>\n