Private data security

Data Protection: EU-US Privacy Shield Update

The new EU-US Privacy Shield agreement aims to ensure that standards of protection given to EU citizens' personal data in the US, is the same as that in Europe. It seeks to achieve this by:

1. Imposing strong obligations on US companies who process the data of EU citizens and making compliance with European Data Protection Authorities' decisions mandatory.

2. Arranging for the US Department of Commerce to monitor US companies' data protection obligations and making these obligations enforceable under US law.

3. Requiring written assurances from the US Government that it will end indiscriminate mass surveillance of EU personal data and that its access to EU personal data will be subject to clear limitations. To monitor this there will be an annual joint review between the European Commission and the US Department of Commerce.

4. Ensuring greater access to redress for EU citizens over any misuse of their data. This will include referrals to the US Department of Commerce, free Alternative Dispute Resolution and the appointment of a new Ombudsman.