Report on the third annual review of the functioning of the EU-U.S. Privacy Shield

Summary:

Report published by the European Commission in October 2019, relating to the third annual review of the functioning of the so-called Privacy Shield, agreed by the European Union (EU) and the United States (US).

Further information:

The report confirms that the United States continues to ensure an adequate level of protection for personal data transferred under the Privacy Shield from the European Union to participating companies in the U.S. Since the previous annual review, there were a number of improvements in the functioning of the framework, as well as appointments to key oversight and redress bodies, such as the Privacy Shield Ombudsperson. Being in the third year of the Shield's operation, the review focused on the lessons learnt from its practical implementation and day-to-day functionality.

The EU-U.S. Privacy Shield Decision was adopted in July 2016 and the Privacy Shield framework became operational on the following month. It protects the fundamental rights of anyone in the EU whose personal data is transferred to certified companies in the United States for commercial purposes and brings legal clarity for businesses relying on transatlantic data transfers.

Official

European Commission: Press Release, 23/10/2019: EU-U.S. Privacy Shield: Third review welcomes progress while identifying steps for improvement https://europa.eu/rapid/press-release_IP-19-6134_en.htm

EUR-Lex: SWD(2019)390: Staff Working Document accompanying the Report https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=SWD:2019:390:FIN

---