ARTICLE
3 February 2025

Validity Of Trans-Border Data Flows Between The EEA And U.S. At Risk (Again)

FL
Foley & Lardner

Contributor

Foley & Lardner LLP looks beyond the law to focus on the constantly evolving demands facing our clients and their industries. With over 1,100 lawyers in 24 offices across the United States, Mexico, Europe and Asia, Foley approaches client service by first understanding our clients’ priorities, objectives and challenges. We work hard to understand our clients’ issues and forge long-term relationships with them to help achieve successful outcomes and solve their legal issues through practical business advice and cutting-edge legal insight. Our clients view us as trusted business advisors because we understand that great legal service is only valuable if it is relevant, practical and beneficial to their businesses.
President Trump's executive orders in the furtherance of his pro-business agenda puts the EU-U.S. Data Protection Framework at risk of being invalidated.
United States Privacy

President Trump's executive orders in the furtherance of his pro-business agenda puts the EU-U.S. Data Protection Framework at risk of being invalidated. The Data Protection Framework (DPF) was the third attempt at an agreement between the European Union and the United States to permit the flow of personal data from the European Economic Area to the United States without requiring the use of the EU Standard Contractual Clauses. It was put in place after the European Court of Justice invalidated the U.S.-EU Safe Harbor in 2015 and the EU-U.S. Privacy Shield in 2020 after they were challenged as not providing enough protection for personal data from the European Economic Area.

The DPF was agreed to after heavy negotiation between the United States and the European Commission. One of the key factors in that approval was President Biden's executive order to have the Privacy and Civil Liberties Oversight Board (PCLOB) provide independent oversight of U.S. mass surveillance laws. President Trump's efforts to effectively fire three Democratic members brings the membership below its quorum and, according to Max Schrem's NYOB organization, puts its independence at risk.

If the DPF is invalidated, the flow of personal data between the EEA and the U.S. would have to immediately stop or switch to another mechanism for facilitation, such as the EU Standard Contractual Clauses or similar standard contractual clauses in the UK or Switzerland. However, the NYOB or other organizations could bring challenges to the ability of the Standard Contractual Clauses to provide a level of protection for personal data that is essentially equivalent to that provided under the GDPR – similar to the challenges that invalidated the U.S.-EU Safe Harbor and the EU-U.S. Privacy Shield. If that happens, it will effectively shut down all personal data flows from the EEA to the U.S., which would have a significant impact on the U.S. economy.

President Donald Trump's reported decision to fire the three Democratic members of the Privacy and Civil Liberties Oversight Board (PCLOB) is raising concerns about the future of the hard-won trans-Atlantic data privacy framework (DPF), privacy experts said. It's not yet clear what impact Trump's Executive Order might have, however, and the European Commission is monitoring the situation, it said.

View referenced article

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More