Analysis

3 Reasons the Privacy Shield Recommendations May Not Be Easy to Implement

Despite concerns over staffing, U.S. surveillance and automated processing, the Privacy Shield passed its first annual review. Now comes the hard part.

X

Thank you for sharing!

Your article was successfully shared with the contacts you provided.
EU flags. EU flags in front of European Commission.

Despite a host of challenges facing the Privacy Shield, the EU-U.S. data transfer agreement cleared its first annual review. Yet while EU officials offered their approval for the agreement, they still noted there is much work left to be done.

This content has been archived. It is available exclusively through our partner LexisNexis®.

To view this content, please continue to Lexis Advance®.

Not a Lexis Advance® Subscriber? Subscribe Now

Why am I seeing this?

LexisNexis® is now the exclusive third party online distributor of the broad collection of current and archived versions of ALM's legal news publications. LexisNexis® customers will be able to access and use ALM's content by subscribing to the LexisNexis® services via Lexis Advance®. This includes content from the National Law Journal®, The American Lawyer®, Law Technology News®, The New York Law Journal® and Corporate Counsel®, as well as ALM's other newspapers, directories, legal treatises, published and unpublished court opinions, and other sources of legal information.

ALM's content plays a significant role in your work and research, and now through this alliance LexisNexis® will bring you access to an even more comprehensive collection of legal content.

For questions call 1-877-256-2472 or contact us at customercare@alm.com

Rhys Dipshan

Rhys Dipshan

CT-born, New York-based legal tech reporter covering everything from in-house technology disruption to privacy trends, blockchain, AI, cybersecurity, and ghosts-in-the-machine. Continually waiting for law to catch up with tech. (It's like waiting for Godot, but without the clowns)

More from this author

Law Firms Mentioned

[caption id="attachment_1689" align="alignnone" width="620"]<img class="size-full wp-image-1689" src="http://www.almcms.com/contrib

  • Eimer Stahl LLP
  • Morgan Lewis Bockius

/uploads/sites/397/2017/10/EU-flags-Article-201710231855.jpg" alt="EU flags." width="620" height="372" /> <i> EU flags in front of European Commission.</i>[/caption] &nbsp; Despite a host of challenges facing the <a href="http://www.law.com/americanlawyer/almID/1202798696051/">Privacy Shield</a>, the EU-U.S. data transfer agreement cleared <a href="http://www.law.com/legaltechnews/sites/therecorder/2017/10/18/eu-seeks-stronger-enforcement-under-privacy-shield/">its first annual review</a>. Yet while EU officials offered their approval for the agreement, they still noted there is much work left to be done. <a href="http://www.law.com/legaltechnews/sites/therecorder/2017/10/18/eu-seeks-stronger-enforcement-under-privacy-shield/">In a statement</a>, V��ra Jourov��<strong>,</strong>��an European Justice commissioner who led the EU Commission review��of the Privacy Shield, said that the Privacy Shield ���works well, but there is some room for improving its implementation.��� The European Commission went on to release 10 recommendations for improving the agreement in the near and long term. While many of these recommendations are far from new, there many be challenges in executing some of them, given both the new administration����in the United States and the different privacy attitudes held by U.S. and the EU officials. Here is a look at three of the most potentially difficult recommendations to implement, and what they mean for the future of the Privacy Shield: <h2><strong>1. An Opening Salvo to Debate Automated Processing?</strong></h2> The��EU Commission recommends to ���commission a study to collect factual evidence and further assess the relevance of automated decision-making for transfers carried out on the basis of the Privacy Shield.��� Given that this��study will take place around the time the EU will be preparing for new privacy laws of its own, this recommendation could represent the first salvo in a broader effort to regulate automated decision making, also known as automated processing, under the Privacy Shield. The move may be an attempt to bring the Privacy Shield in line with the EU���s upcoming General Data Protection Regulation (GDPR), which will ���require organizations to be more communicative and thoughtful in their automated decision-making activities,��� said Pulina Whitaker, partner at Morgan, Lewis &amp; Bockius. Article 22 of the GDPR said that EU citizens ���shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affect him or her.��� But regulating automated processing in the U.S. may be difficult: many organizations employ automation to collect, process and analyze data for a variety of purposes, Debbie Reynolds, director of EimerStahl Discovery Solutions at Eimer Stahl, said that how such processing factors into Privacy Shield will need to be figured out quickly not only ���because of the GDPR coming into effect next year,��� but also because ���it poses a significant challenge to the integrity of the Privacy Shield.��� Reynolds explained that the "three biggest calls" to invalidate the Safe Harbor Agreement, the since-nullified predecessor to the Privacy Shield, were all "things have to do with people of the EU being uncomfortable�� with bulk [automated] processing���: the <span style="font-size: 1rem">"Patriot Act, the Edward Snowden revelations and the Max Schrems��� case out of Ireland,"��</span> Reynolds added that while commissioning a study <strong>��</strong>is ���a good idea,��� the EU and U.S. ���are far apart on where they stand on bulk [automated] processing and how that is going to impact EU citizens.��� <h2><strong>2. Staffing Woes </strong></h2> Among its recommendations, the EU Commission reiterated what it had called for at the beginning of the annual review: the need for the United States to fill out key administrative positions vital to Privacy Shield operations. These position include the still vacant Ombudsperson role at the U.S. Department of State to address complaints by EU citizens over Privacy Shield violations, and numerous vacant positions on the Privacy and Civil Liberties Oversight Board (PCLOB), which is meant to oversee U.S. government surveillance programs. There are signs that it may be an uphill battle. When asked about the slow pace of appointments in his administration during an <a href="https://www.forbes.com/sites/randalllane/2017/10/10/trump-unfiltered/2/#50da3081c771">October 2017 interview</a> with Forbes magazine, U.S. President Donald Trump signaled the vacancies in many federal departments were intentional. ���Im generally not going to make a lot of the appointments that would normally be���because you dont need them,��� he said. ���I mean, you look at some of these agencies, how massive they are, and its totally unnecessary.��� There are signs, however, that the administration is moving to fill out the PCLOB, given the recent nomination of Adam Klein, senior fellow at the Center for a New American Security and former law clerk to the late U.S. Supreme Court Justice Antonin Scalia, as its chairman. Charles-Albert Helleputte, a partner in Mayer Brown���s Brussels office, said that this ���recent appointment is likely to be considered as a good signal by EU institutions.��� He added, ���For the EU, the��appointment can be considered as a course of action." But while a good sign, Morgan Lewis Whitaker notes that the Privacy Shield apparatus is still missing far more essential U.S. officials. ���Appointing a permanent ombudsman is more critical at this stage, including for continuing communications about the operation of the Privacy Shield,��� she said. <h2><strong>3. From Policy Directive to Law?</strong></h2> Under <a href="https://obamawhitehouse.archives.gov/the-press-office/2014/01/17/presidential-policy-directive-signals-intelligence-activities">Presidential Policy Directive 28</a>, former President Barack Obama limited��U.S. mass surveillance activities to��respect the privacy of both U.S. and foreign citizens. The directive, known as PPD-28, was a key assurance for the EU, curtailing U.S. surveillance activities within certain boundaries. Now, EU officials want to make sure these protections become permanent. The EU Commission for the Privacy Shield Review recommended that the policy directive be enshrined under the Foreign Intelligence Surveillance Act (FISA) when the law is up for reauthorization at the end of 2017. It is difficult to know, however, whether there is support for such a move from the Trump administration, or leaders of Congress, as��there has been little public comment on the fate of PPD-28. However, during his March 2017 U.S. Senate nomination hearing, now-approved director of National Intelligence Daniel Coats briefly addressed the issue in <a href="https://www.intelligence.senate.gov/sites/default/files/documents/aphqs-coats-022817.pdf">written responses</a> to the Senate Select<b>��</b>Committee on Intelligence questionnaire. Coats��wrote that ���the European Commission relied in significant part on the privacy protections of PPD-28 when it found the U.S.-E.U. Privacy Shield framework was adequate. For that reason, before any changes to the PPD are made, I believe it [important to consider the consequence of any modifications.��� Beyond Coats, though, it is difficult to know how others in the Trump administration view the PPD-28. ���Especially because [this administration] has not been of very supportive of some of the prior Obama administrations activities or actions, I think people are waiting to see whether this administration will support the [PPD-28],��� Reynolds said. She added that ���it���s in everyone���s best interest to ensure that these issues don���t impact commerce or impact Europeans fundamental right to privacy.��� &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <

  • Eimer Stahl LLP
  • Morgan Lewis Bockius

> Knitter: Too few entities/relations are generated compared to number of concepts (only 99% (103/104) concepts are converted).

Trending Stories

 

Featured Product

Higher Law

Cannabis & the Legal Industry

Cheryl Miller tracks law firm cannabis practices and clears the haze around the biggest legal issues. Sign up for the weekly Higher Law newsletter.

Learn More

Recommended Stories

More from ALM

  • Premium Subscription

    With this subscription you will receive unlimited access to high quality, online, on-demand premium content from well-respected faculty in the legal industry. This is perfect for attorneys licensed in multiple jurisdictions or for attorneys that have fulfilled their CLE requirement but need to access resourceful information for their practice areas.

    View Now

  • Team Accounts

    Our Team Account subscription service is for legal teams of four or more attorneys. Each attorney is granted unlimited access to high quality, on-demand premium content from well-respected faculty in the legal industry along with administrative access to easily manage CLE for the entire team.

    View Now

  • Bundle Subscriptions

    Gain access to some of the most knowledgeable and experienced attorneys with our 2 bundle options! Our Compliance bundles are curated by CLE Counselors and include current legal topics and challenges within the industry. Our second option allows you to build your bundle and strategically select the content that pertains to your needs. Both options are priced the same.

    View Now


    • CLE Center →

  • From Data to Decisions

    Dynamically explore and compare data on law firms, companies, individual lawyers, and industry trends.

  • Exclusive Depth and Reach.

    Legal Compass includes access to our exclusive industry reports, combining the unmatched expertise of our analyst team with ALM’s deep bench of proprietary information to provide insights that can’t be found anywhere else.

  • Big Pictures and Fine Details

    Legal Compass delivers you the full scope of information, from the rankings of the Am Law 200 and NLJ 500 to intricate details and comparisons of firms’ financials, staffing, clients, news and events.


    • Legal Compass →


  • Legalweek New York 2020

    February 03, 2020 - February 06, 2020
    New York, NY

    Legalweek New York explores Business and Regulatory Trends, Technology and Talent drivers impacting law firms.

  • Women, Influence & Power in Law Awards 2019

    October 16, 2019
    Washington, DC

    Women, Influence & Power in Law Awards 2019 honors women lawyers who have made a remarkable difference in the legal profession.

  • Women, Influence & Power in Law (WIPL) 2019

    October 16, 2019 - October 18, 2019
    Washington, D.C.

    WIPL is the original global forum facilitating women-to-women exchange on leadership and legal issues.


    • Browse More Events →

  • Law.com

    How to Increase the Speed and Effectiveness of Your Search and Data Culling

    Sponsor: iPro Tech |

    Search tools and methodologies have a variety of capabilities during the eDiscovery phase of the litigation lifecycle.

  • Law.com

    Inside the Mind of a Mediator: Avoiding Impasse and Maximizing Outcomes in Mediation

    Sponsored by: NAM |

    Although mediation resolves most disputes, some mediations end in impasse.

  • Law.com

    Driving Down the Cost of Ediscovery: a PREX Presentation

    Sponsored By: Zapproved |

    Traditional approaches to ediscovery are costly, time-consuming, and unsustainable.


    • Webcasts →

  • Medical Malpractice Attorney

    New York, New York, United States

    Established mid-sized New York City litigation defense firm seeks a New York attorney with 5-8 years of experience for its medical malpracti...

    Apply Now ›

  • Hearing Officer

    Harrisburg, Pennsylvania, United States

    The Office for Dispute Resolution hearing officer is responsible forpresiding over special education due process hearings, reachingconclusio...

    Apply Now ›

  • Exclusive white collar/FCPA associate position (3-6 years)

    Washington D.C., District of Columbia, United States

    Summary of position:  Rapidly growing white-collar/FCPA practice at prestigious international firm in Washington, DC is seeking to add ...

    Apply Now ›


    • Lawjobs →

 

ALM Legal Publication Newsletters

Sign Up Today and Never Miss Another Story.

As part of your digital membership, you can sign up for an unlimited number of a wide range of complimentary newsletters. Visit your My Account page to make your selections. Get the timely legal news and critical analysis you cannot afford to miss. Tailored just for you. In your inbox. Every day.

Privacy Policy

Privacy Policy / Terms of Service

Publications

Law Topics

Rankings

More

Law.com

Copyright © 2019 ALM Media Properties, LLC. All Rights Reserved.